feat(resources): add network management with create, inspect, and topology visualization (#335)

* feat(resources): add network management with create, inspect, and topology visualization

Add full Docker network CRUD: create networks with custom drivers, subnets,
and IPAM config; inspect network details including connected containers and
IP addresses; interactive topology graph visualization (Pro-gated to
Skipper/Admiral tiers). Includes backend routes, DockerController methods,
unit tests, documentation with screenshots, and updated changelog.

* refactor(resources): address code review findings for network management

- Add batch GET /api/system/networks/topology endpoint to eliminate N+1
  HTTP calls from the topology view
- Export DockerNetwork type from ResourcesView, remove duplicate in
  NetworkTopologyView
- Wire up isInspectLoading state to Eye button (spinner + disabled)
- Remove unnecessary wrapper div around FilterToggle
- NetworkTopologyView is now self-contained (fetches from batch endpoint,
  no longer needs networks prop)

* fix(resources): align pre-existing UI with design system standards

- Replace hardcoded red-500 on image/volume delete buttons with
  text-destructive/60 hover:bg-destructive tokens
- Replace shadow-sm with shadow-card-bevel on all cards (Disk Footprint,
  Quick Clean, Resource Tabs, Unmanaged Containers)
- Add strokeWidth={1.5} to all action button Trash2 icons
- Type network drivers as union type instead of raw strings (backend
  NetworkDriver type + frontend NETWORK_DRIVERS constant)

* fix(resources): add generic type args to useNodesState/useEdgesState

Fixes TS2345 build error in CI where tsc -b (strict mode via
tsconfig.app.json) infers never[] from untyped empty array literals
passed to React Flow hooks.

* fix(resources): replace explicit any in catch blocks with unknown narrowing

ESLint no-explicit-any errors in CI for three catch blocks added by the
network management feature.

backend/src/services/DockerController.ts

@@ -37,6 +37,17 @@ export interface ClassifiedNetwork {
   managedStatus: 'managed' | 'unmanaged' | 'system';
 }
 
+export type NetworkDriver = 'bridge' | 'overlay' | 'macvlan' | 'host' | 'none';
+
+export interface CreateNetworkOptions {
+  Name: string;
+  Driver?: NetworkDriver;
+  IPAM?: { Config: Array<{ Subnet?: string; Gateway?: string }> };
+  Labels?: Record<string, string>;
+  Internal?: boolean;
+  Attachable?: boolean;
+}
+
 class DockerController {
   private docker: Docker;
   private nodeId: number;
@@ -331,6 +342,18 @@ class DockerController {
     await network.remove({ force: true });
   }
 
+  public async inspectNetwork(id: string) {
+    const network = this.docker.getNetwork(id);
+    return await network.inspect();
+  }
+
+  public async createNetwork(options: CreateNetworkOptions) {
+    if (!options.Name || !/^[a-zA-Z0-9][a-zA-Z0-9._-]*$/.test(options.Name)) {
+      throw new Error('Invalid network name. Use alphanumeric characters, hyphens, underscores, and dots.');
+    }
+    return await this.docker.createNetwork(options);
+  }
+
   public async getRunningContainers() {
     const containers = await this.docker.listContainers({ all: false });
     return this.validateApiData<any[]>(containers);