v0.308.0: controller batch 2026-10-12 — clear-address warning (R-922), secret sweep over every page (R-255), read_failed (R-266), no NVMe heat band (R-333), share globe (R-577), Hungarian dates and numbers (R-562), lost-drive option pinned (R-521)

Operator rulings 2026-10-12, 09 §3 decisions 196, 204-207, 223, 227. MinAgent 0.131.0 unchanged.
R-255's sweep found one leak, fixed here: an optional-config secret_input was rendered into its
settings page; it is now revealed on demand. Hungarian parity fixtures re-captured once for R-562.

Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_0159rPz1ZhFKsS53msqPYxtS

controller/internal/web/disk_health_state.go

@@ -238,7 +238,7 @@ func diskAlertKindFor(sm *agentapi.SmartSummary, v agentapi.DiskVerdict, worsene
 	switch {
 	case sm != nil && sm.Health == agentapi.SmartFailing:
 		return notify.DiskAlertFailSelfReported
-	case sm != nil && sm.TemperatureC != nil && *sm.TemperatureC >= agentapi.TemperatureFailC:
+	case sm != nil && !agentapi.IsNVMe(sm) && sm.TemperatureC != nil && *sm.TemperatureC >= agentapi.TemperatureFailC:
 		return notify.DiskAlertFailTemperature
 	case agentapi.UncorrectableSectors(sm) > 0 && worsened:
 		return notify.DiskAlertFailWorsened