feat(plugins): plugin pages, per-user config, capabilities gate, mobile/telegram refactors

- Plugin HTTP routes + web pages (plugin-page-host, plugin-catalog, plugin-detail)
- Plugin access grants + per-user config (DB tables + API + frontend forms)
- Capabilities-based guard (caps.rs) replacing role-id checks
- Mobile connector: message routing, payload types, router refactor
- Telegram bot: auth flow, event handling improvements
- Honcho plugin: substantial rework
- Sidebar: plugin pages integration, role-driven visibility
- i18n: new strings for plugins, connectors, capabilities
- Remove unused mascot asset

web/css/connectors.css

@@ -270,3 +270,33 @@
   font-size: 0.7rem;
   color: var(--placeholder-color);
 }
+
+/* ── Plugin health dot ────────────────────────────────────────────────────────
+ *
+ * The plugin catalog's red/green status: green = enabled, running and fully
+ * configured; red = enabled but broken; grey = off. Same Bootstrap-subtle
+ * colour sources as the chips, so light/dark follows `data-bs-theme`.
+ */
+
+.plugin-status-dot {
+  display: inline-block;
+  width: 0.5rem;
+  height: 0.5rem;
+  border-radius: 50%;
+  flex-shrink: 0;
+}
+
+.plugin-status-dot--ok {
+  background: var(--bs-success);
+  box-shadow: 0 0 0 2px var(--bs-success-bg-subtle);
+}
+
+.plugin-status-dot--err {
+  background: var(--bs-danger);
+  box-shadow: 0 0 0 2px var(--bs-danger-bg-subtle);
+}
+
+.plugin-status-dot--off {
+  background: var(--placeholder-color);
+  opacity: 0.5;
+}