D1 Part 3: unified drive view + overlay migration

- storage.html: the registry cards and the separate 'Meghajtók (ügynök
  nézet)' merge into ONE view. Each connected registry card gets an
  #agent-extra-<path> slot; the enrichment JS joins the agent /api/disks
  list on mount path and decorates the matching card in place (role tag
  via i-lock, drive class, durable-id mono line, agent-only
  register/eject/wipe actions). Two extra groups render below:
  'Rendszermeghajtók' (system/backup — read-only, lock tag, NO actions)
  and 'Nem regisztrált meghajtók' (unregistered user-data — register
  action only). Agent-down: one warn note into #agent-warn-note, all
  registry cards still render from server data (graceful degradation).
  The agent-view helpers now emit design-system .tag markup instead of
  .badge (roleTag/classTag/dataTag/regTag/appBackingTag); the 🔒 lock
  emoji is gone (sprite i-lock).
- Overlay migration: every native confirm()/prompt() on the four pages
  routes through a light .confirm-overlay dialog (openDialog; texts
  verbatim) — storage remove forms, netStorageRemove, storageMigrateAll,
  storageDisconnect, storageDecommission (migrate + the type-to-confirm
  anyway branch preserved like-for-like), storageReEnroll; and on the
  system page triggerUpdate + controller/server restart; on the security
  page the two geo Hungary-removal confirms. Scenario F grep: zero
  native confirm/prompt in the four templates.
- Deleted the now-orphaned .badge-lock/.lock-ico CSS (grep-zero first).
- Tests: no-native-confirm scan, agent-down warn-note static assertion;
  integrity gate stays green.

controller/internal/web/templates/settings_security.html

@@ -109,7 +109,24 @@
     {{end}}
 </div>
 
+<div id="dialog-root"></div>
 <script>
+// Light overlay dialog (D1) — replaces the native blocking browser dialogs (same texts).
+function escText(s){var d=document.createElement('div');d.textContent=String(s==null?'':s);return d.innerHTML;}
+function closeDialog(){ var r=document.getElementById('dialog-root'); if(r) r.innerHTML=''; }
+function openDialog(opts){
+    var root=document.getElementById('dialog-root');
+    if(!root) return;
+    root.innerHTML='<div class="confirm-overlay" onclick="if(event.target===this)document.getElementById(\'dialog-cancel\').click()"><div class="confirm-box">'
+        +'<h3>'+escText(opts.title||'Megerősítés')+'</h3>'
+        +'<p style="white-space:pre-line">'+escText(opts.message||'')+'</p>'
+        +'<div class="form-actions"><button id="dialog-go" class="btn btn-primary">'+escText(opts.confirmLabel||'Megerősítés')+'</button>'
+        +'<button type="button" class="btn btn-outline" id="dialog-cancel">Mégsem</button></div>'
+        +'</div></div>';
+    document.getElementById('dialog-go').onclick=function(){ closeDialog(); if(opts.onConfirm) opts.onConfirm(); };
+    document.getElementById('dialog-cancel').onclick=function(){ closeDialog(); if(opts.onCancel) opts.onCancel(); };
+}
+
 (function(){
     // Geo-restriction UI state
     var allCountries = [];
@@ -171,11 +188,17 @@
 
     window.removeCountry = function(code) {
         if (code === 'HU') {
-            if (!confirm('Figyelem: Magyarország eltávolítása azt jelenti, hogy magyar IP-ről sem lesz elérhető a rendszer távolról. Biztosan folytatja?')) return;
+            openDialog({title:'Figyelem', confirmLabel:'Eltávolítás',
+                message:'Figyelem: Magyarország eltávolítása azt jelenti, hogy magyar IP-ről sem lesz elérhető a rendszer távolról. Biztosan folytatja?',
+                onConfirm:function(){ doRemoveCountry(code); }});
+            return;
         }
+        doRemoveCountry(code);
+    };
+    function doRemoveCountry(code) {
         selectedCountries = selectedCountries.filter(function(c){return c !== code});
         renderTags();
-    };
+    }
 
     function renderTags() {
         var el = document.getElementById('geo-selected-tags');
@@ -223,8 +246,11 @@
         if (!ov) return;
         var idx = ov.allowed_countries.indexOf(code);
         if (idx >= 0) {
-            if (code === 'HU' && !confirm('Magyarország eltávolítása nem ajánlott. Folytatja?')) {
-                el.checked = true;
+            if (code === 'HU') {
+                openDialog({title:'Figyelem', confirmLabel:'Eltávolítás',
+                    message:'Magyarország eltávolítása nem ajánlott. Folytatja?',
+                    onConfirm:function(){ ov.allowed_countries.splice(ov.allowed_countries.indexOf(code), 1); },
+                    onCancel:function(){ el.checked = true; }});
                 return;
             }
             ov.allowed_countries.splice(idx, 1);