feat: M10 — agent metadata collection, Apache httpd + HAProxy target connectors

Agents now report OS, architecture, IP address, hostname, and version
via heartbeat using runtime.GOOS, runtime.GOARCH, and net.Dial. New
migration adds columns to agents table. Heartbeat handler, service,
and repository updated to accept and persist metadata. GUI shows
OS/Arch in agent list and full system info in agent detail page.

Apache httpd connector: separate cert/chain/key files, apachectl
configtest validation, graceful reload. HAProxy connector: combined
PEM file (cert+chain+key), optional config validation, reload.
Both wired into agent binary's target connector switch.

14 tests for new connectors. All existing tests updated for new
Heartbeat/UpdateHeartbeat signatures. Docs updated across README,
architecture, concepts, and connectors guides.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

web/src/api/types.ts

@@ -39,11 +39,15 @@ export interface Agent {
   name: string;
   hostname: string;
   ip_address: string;
+  os: string;
+  architecture: string;
   status: string;
   version: string;
   last_heartbeat: string;
+  last_heartbeat_at: string;
   capabilities: string[];
   tags: Record<string, string>;
+  registered_at: string;
   created_at: string;
   updated_at: string;
 }