ZFS tab: landing tier checks — stale files, verify passes against the mover's ledger, verify schedules

A verify pass reads the pool's copy of every file the mover moved back against the SHA-256 the
mover took of the landing copy (its ledger, named in its status file): match, mismatch, edited
since, gone, waiting, unreadable, unhashed. 'New moves' checks what moved since the last pass,
'everything' the whole ledger. Passes run as 'hamlab landing-verify' in their own session — the
same command a schedule's line in /etc/cron.d/hamlab-landing runs — so a console restart does
not cut one short. Stale files: anything waiting on the landing branch over an hour, listed.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

internal/api/zfs.go

@@ -26,7 +26,8 @@ import (
 )
 
 type zfsState struct {
-	Policies []storage.Policy `json:"policies"`
+	Policies []storage.Policy       `json:"policies"`
+	Verify   []storage.VerifyPolicy `json:"verify"` // landing-tier verify schedules (landing.go)
 }
 
 func (s *Server) zfsLoad() zfsState {
@@ -39,6 +40,9 @@ func (s *Server) zfsLoad() zfsState {
 	if z.Policies == nil {
 		z.Policies = []storage.Policy{}
 	}
+	if z.Verify == nil {
+		z.Verify = []storage.VerifyPolicy{}
+	}
 	return z
 }