feat(federation-ui): add needs_attention pill and Reset peering action

- peerStatusLabel/Color/DotColor gain a 'needs_attention' case (rose).
- StatusFilter row gains 'Needs Attention' toggle.
- PeerRow hides Rotate/Revoke and shows 'Reset Peering' when status is
  needs_attention, plus an Auth Failures stat.
- Parent panel routes 'reset' through a ConfirmDialog (danger variant)
  that spells out the destructive nature and the out-of-band re-peer step.
- Client FederationPeer interface gains consecutiveAuthFailures (Task 2
  extended the shared type but the web client's local mirror was stale).

Codifies the manual 'delete both sides, re-peer' workaround as a
first-class admin action.

packages/web/src/api/client.ts

@@ -71,6 +71,7 @@ export interface FederationPeer {
   lastSeenAt: number | null;
   lastFailureAt: number | null;
   consecutiveFailures: number | null;
+  consecutiveAuthFailures: number;
   lastSyncedAt: number | null;
   createdAt: number;
   secretRotatedAt: number | null;