fix(status): source column reflects real traffic + theme-aware tray menu

- api/status sources now carry recent_ok/recent_err (last 300s real gateway
  requests via Stats.SourceRecent) so a source actually serving traffic is
  never shown as down just because probe /models got rate-limited
- WebUI source status column repaints every 5s (no more frozen-at-first-
  render) with a manual refresh button; shows success rate + probe + cooldown
- tray menu status rows were enabled:false (GTK fixed light-grey, invisible
  on light themes) — now enabled with no-op click and nativeTheme listener
  rebuilds the menu on dark/light switches
- ignore local ops scripts (scripts/, machine-specific)

internal/provider/registry.go

@@ -211,6 +211,12 @@ type SourceStatus struct {
 	FailCount     int      `json:"fail_count,omitempty"`
 	BackoffUntil  int64    `json:"backoff_until,omitempty"`
 	Permanent     bool     `json:"permanent,omitempty"`
+	// RecentOK / RecentErr count real gateway requests served by this source
+	// within the last 300s (drives the status column so a source that is
+	// actually serving traffic can never be shown as down just because a
+	// probe was rate-limited by the upstream).
+	RecentOK  int64 `json:"recent_ok,omitempty"`
+	RecentErr int64 `json:"recent_err,omitempty"`
 }
 
 // ProbeAll runs a live reachability check for every provider (in parallel).
@@ -260,4 +266,4 @@ func (r *Registry) Status() []SourceStatus {
 		out = append(out, s)
 	}
 	return out
-}
+}