feat(v5): add server reconciliation and canvas APIs

Split V5 dashboard behavior into domain controllers and policies,
add agent token rotation/revocation, status reconciliation jobs,
ingress firewall syncing, and canvas connection APIs.

Add migrations for V5 status tracking, server capabilities, resource
connection aliases, and revoked agent tokens.

app/Providers/RouteServiceProvider.php

@@ -60,6 +60,14 @@ class RouteServiceProvider extends ServiceProvider
             return Limit::perMinute(5)->by($request->user()?->id ?: $request->ip());
         });
 
+        // v5 authenticated web endpoints run synchronous SSH/Flux work per
+        // request (connectivity checks, bootstrap, diagnostics). Throttle per
+        // user so a single member cannot pin FPM workers by hammering them,
+        // while leaving ample headroom for the canvas's 3s cluster polling.
+        RateLimiter::for('v5', function (Request $request) {
+            return Limit::perMinute(120)->by($request->user()?->id ?: $request->ip());
+        });
+
         RateLimiter::for('feedback', function (Request $request) {
             return Limit::perMinute(3)->by($request->user()?->id ?: $request->ip());
         });