Add OpenCode Zen support, model health/stats dashboard, and gateway fallback fixes

AI gateway:
- Add a generic, admin-selectable `client_profile` field on gateway_providers
  (e.g. "opencode") so a provider needing special request headers (OpenCode
  Zen's client-identity spoofing) is configured like any other provider, not
  hardcoded by name.
- Track per-(provider, model) reliability/speed/latency health in memory,
  seeded from the existing gateway_usage_ledger at startup - purely
  observational, never influences routing.
- New Stats tab on /admin/gateway: request volume, latency, per-model
  breakdowns, and reliability weight, charted with a vendored Chart.js and
  devplace's own theme tokens.
- Record which model a failed request actually fell back to
  (fallback_used_route), surfaced in the Recent Failures table.
- Stop excluding context_length errors from fallback, and skip a primary
  attempt outright when its known context window is already too small for
  the estimated request size, going straight to the fallback.
- gateway_usage_ledger's provider/fallback_used_route columns and indexes
  are ensured centrally in database/schema.py's init_db(), the single point
  of truth for this table's schema.
- Non-OpenAI upstream routing and client-model passthrough; trust only the
  upstream's own X-Gateway-Model header for served-model attribution.

Devii agent:
- Fix a real lockup: plan/verify tools could be individually disabled via
  the admin tool toggles while still being required by the protocol gate,
  permanently bricking any task that needed tools. They can no longer be
  disabled, and the gate now also checks the tool is actually offered.
- Fix compaction being silently calibrated for a 1M-token model while
  running a much smaller one: context budget is now percentage-based and
  the summarizer's own request is sized to fit the real model.
- Give a specific, actionable retry message when plan()'s own arguments get
  cut off by the output limit, and tighten its schema to discourage
  overlong plans.

Other:
- Backup service: offload completed backups to a remote Hetzner Storage Box.
- Container manager: fix orphan blob leaks from sync races, add a two-phase
  plan/execute `system prune` CLI command.
- Admin gateway UI: replace the JS-rendered model/provider tables with
  server-rendered forms and pages.

Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01DhmEkvutuwtzFVcLbTrhdo

tests/api/admin/gateway/quota.py

@@ -11,6 +11,7 @@ from tests.api.admin.gateway.index import (
     JSON_gateway,
     admin_session,
     member_key,
+    _unique_gateway,
 )
 from tests.conftest import BASE_URL
 
@@ -160,3 +161,121 @@ def test_spend_recorded_after_a_reset_counts_again(seeded_db):
     )
     _burn(owner, "appa", 0.5)
     assert _spent(owner, "appa") == 0.5
+
+
+def test_quota_rule_form_pages_require_admin(seeded_db):
+    assert (
+        requests.get(
+            f"{BASE_URL}/admin/gateway/quota-rules/new",
+            headers=JSON_gateway,
+            allow_redirects=False,
+        ).status_code
+        == 401
+    )
+    key = member_key()
+    assert (
+        requests.get(
+            f"{BASE_URL}/admin/gateway/quota-rules/new",
+            headers={**JSON_gateway, "X-API-KEY": key},
+            allow_redirects=False,
+        ).status_code
+        == 403
+    )
+
+
+def test_quota_rule_add_edit_delete_reset_via_page(seeded_db):
+    admin = admin_session(seeded_db)
+    owner = _owner()
+    app_ref = _unique_gateway("qrapp").lower()
+
+    new_page = admin.get(f"{BASE_URL}/admin/gateway/quota-rules/new")
+    assert new_page.status_code == 200
+    assert new_page.json()["is_edit"] is False
+
+    created = admin.post(
+        f"{BASE_URL}/admin/gateway/quota-rules/new",
+        data={
+            "owner_kind": "user",
+            "owner_id": owner,
+            "app_reference": app_ref,
+            "limit_usd": "2.5",
+            "is_active": "1",
+            "label": "page test",
+        },
+        allow_redirects=False,
+    )
+    assert created.status_code == 302
+    assert created.headers["location"] == "/admin/gateway?tab=quota"
+
+    rules = admin.get(f"{BASE_URL}/admin/gateway/quota-rules").json()["rules"]
+    rule = next(r for r in rules if r["owner_id"] == owner and r["app_reference"] == app_ref)
+    uid = rule["uid"]
+    assert rule["limit_usd"] == 2.5
+
+    edit_page = admin.get(f"{BASE_URL}/admin/gateway/quota-rules/{uid}/edit")
+    assert edit_page.status_code == 200
+    assert edit_page.json()["form"]["limit_usd"] == "2.5"
+
+    updated = admin.post(
+        f"{BASE_URL}/admin/gateway/quota-rules/{uid}/edit",
+        data={
+            "owner_kind": "user",
+            "owner_id": owner,
+            "app_reference": app_ref,
+            "limit_usd": "5.0",
+            "is_active": "1",
+            "label": "page test updated",
+        },
+        allow_redirects=False,
+    )
+    assert updated.status_code == 302
+
+    rules = admin.get(f"{BASE_URL}/admin/gateway/quota-rules").json()["rules"]
+    rule = next(r for r in rules if r["uid"] == uid)
+    assert rule["limit_usd"] == 5.0
+    assert rule["label"] == "page test updated"
+
+    _burn(owner, app_ref, 1.0)
+    assert _spent(owner, app_ref) == 1.0
+    reset_response = admin.post(
+        f"{BASE_URL}/admin/gateway/quota-rules/{uid}/reset", allow_redirects=False
+    )
+    assert reset_response.status_code == 302
+    assert _spent(owner, app_ref) == 0.0
+
+    deleted = admin.post(
+        f"{BASE_URL}/admin/gateway/quota-rules/{uid}/delete", allow_redirects=False
+    )
+    assert deleted.status_code == 302
+    assert (
+        admin.get(f"{BASE_URL}/admin/gateway/quota-rules/{uid}/edit").status_code == 404
+    )
+
+
+def test_quota_rule_page_requires_a_dimension(seeded_db):
+    admin = admin_session(seeded_db)
+    response = admin.post(
+        f"{BASE_URL}/admin/gateway/quota-rules/new",
+        data={"limit_usd": "1.0"},
+    )
+    assert response.status_code == 400
+    assert "message" in response.json()["error"]
+
+
+def test_quota_rule_edit_page_404_for_missing_rule(seeded_db):
+    admin = admin_session(seeded_db)
+    from devplacepy.utils import generate_uid
+
+    missing = generate_uid()
+    assert (
+        admin.get(f"{BASE_URL}/admin/gateway/quota-rules/{missing}/edit").status_code
+        == 404
+    )
+    assert (
+        admin.post(f"{BASE_URL}/admin/gateway/quota-rules/{missing}/delete").status_code
+        == 404
+    )
+    assert (
+        admin.post(f"{BASE_URL}/admin/gateway/quota-rules/{missing}/reset").status_code
+        == 404
+    )