Hub v0.149.0: a box the household switched off is not an outage for 14 days (R-998)

hosts.deliberate_off_at follows the agent's deliberate_off field (set, then cleared by the first
report of a new boot; one info event each way). While held, every silence alarm is held: host and
node staleness, the 05:00 backup deadlines, off-site and restore-test freshness, the OS alarms and
the kernel notice. After 14 days the usual alarms fire once, naming the power-off. Pages show
KIKAPCSOLVA and the time. Consequence tests with controls; each guard red-proofed.

hub/internal/web/server.go

@@ -1154,7 +1154,7 @@ func statusColor(status string) string {
 		return "crit"
 	case "blocked":
 		return "warn"
-	case "disabled", "pending":
+	case "disabled", "pending", "off":
 		return "neutral"
 	default:
 		return "neutral"