feat: socle BDD (tâche 1.9 Phase 1-2) + moteur APT (tâche 2 SJ-0→3) + WIP capabilities/auth/Rust

Checkpoint multi-chantiers (arbre vert : tsc 0 erreur, 70 tests, build OK).
- tâche 1.9 Phase 1 : schéma socle (machine_state/events/reports/raw_artifacts/
  hardware/metrics + colonnes étendues) + wiring refresh/execute. Migration 0002.
- tâche 1.9 Phase 2 : machine_credentials + machine_host_keys (non destructif,
  dual-read + backfill). Migration 0003. Fix séquence journal de migration.
- tâche 2 : SJ-0 (types étendus rétro-compatibles, réducteur Docker, resolveTemplate),
  SJ-1 (update-analyze enrichi), SJ-2 (apply + diff dpkg + timeout inactivité SSH),
  SJ-3 (reboot vérifié boot_id).
- WIP parallèle inclus : /api/capabilities, auth/apiTokens/apiClients, system metrics,
  scaffold app_rust, ajustements frontend.

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>

client/src/components/ui-kit.tsx

@@ -46,6 +46,17 @@ const ICON_MAP = {
   filter:   'filter',
   download: 'download',
   folder:   'folder',
+  docker:   'boxes-stacked',
+  package:  'box-open',
+  script:   'file-code',
+  shield:   'shield-halved',
+  key:      'key',
+  locked:   'lock',
+  logs:     'file-lines',
+  report:   'clipboard-list',
+  copy:     'copy',
+  collapse: 'down-left-and-up-right-to-center',
+  upgrade:  'cloud-arrow-down',
   node:     'circle-nodes',
   user:     'user',
 };