fix(resources): harden Resource Explorer with auth, validation, design, and UX fixes (#527)

- Sanitize error messages in all delete/prune/create/inspect endpoints
  to prevent Docker internals from leaking to the frontend
- Add CIDR, IPv4, and Docker resource ID input validation
- Add requirePaid gate to network topology endpoint
- Add invalidateNodeCaches after image/volume/network mutations
- Fix design system violations: card borders, destructive button variant,
  visible DialogDescription, overflow-auto replaced with ScrollArea,
  hardcoded Tailwind colors replaced with tokens
- Gate purge button behind isAdmin to prevent silent 403s
- Fix shared inspect loading state to be per-network-row
- Parse error response bodies for meaningful toast messages
- Add clipboard API fallback for non-HTTPS contexts
- Render Options section in network inspect sheet
- Add operational and diagnostic logging for resource operations
- Extend validation and DockerController test suites
- Update docs with Options field in network inspect

docs/features/resources.mdx

@@ -96,6 +96,7 @@ Click the eye icon on any network row to open a detail panel showing:
 
 - **Overview** - ID, driver, scope, creation date, internal/attachable flags
 - **IPAM configuration** - Subnet, gateway, and IP range
+- **Options** - Driver-specific options applied to the network (when present)
 - **Connected containers** - Container name, IPv4 address, and MAC address
 - **Labels** - All Docker labels applied to the network