🩺 Health checks

The watcher’s hourly test battery and the supervisor’s 30-minute tripwire over every tool. Dismiss hides a finding everywhere until it’s fixed; the status dot stays red.