Alerts tab, Docker tab, nine new skins including HUD, a colour for every machine

Alerts: rules over sensors, watched fleet-wide from the hub; ntfy and webhook channels;
firing count on the rail. Docker: containers by stack with live use, start/stop/restart,
following logs, inspect, images/volumes/networks. Skins: HUD, Nord, Gruvbox, Catppuccin
(+Latte), Dracula, Tokyo Night, Solarized (+Light). Accents: per-machine colour.

Co-Authored-By: Claude Fable 5.1 <noreply@anthropic.com>

internal/api/server.go

@@ -59,6 +59,7 @@ type Server struct {
 	metrics     *metrics.Collector
 	sensors     *sensors.Registry
 	streams     streamGate
+	alerts      *alertEngine
 	store       *store.Store
 	svc         *services.Manager
 	cron        *cron.Manager
@@ -88,6 +89,7 @@ func New(cfg *config.Config, sessions *auth.Sessions, mgr *term.Manager, col *me
 		s.user = "?"
 	}
 	s.sensors.Add(newStatusSensors(s))
+	s.alerts = newAlertEngine(s)
 	// The saved dashboard layout carries the sampling interval; apply it on boot.
 	var raw json.RawMessage
 	st.View(func(x *store.State) { raw = x.Dashboard })
@@ -126,6 +128,13 @@ func New(cfg *config.Config, sessions *auth.Sessions, mgr *term.Manager, col *me
 	m.HandleFunc("GET /api/nodes/{name}/sensors/{rest...}", s.sensorAuth(s.proxyNodeSensors))
 	m.HandleFunc("POST /api/nodes/{name}/sensors/query", s.sensorAuth(s.proxyNodeSensors))
 	m.HandleFunc("POST /api/tokens/read", s.auth(s.issueReadToken))
+	m.HandleFunc("GET /api/docker", s.auth(s.dockerOverview))
+	m.HandleFunc("POST /api/docker/containers/{id}/{action}", s.auth(s.dockerAction))
+	m.HandleFunc("GET /api/docker/containers/{id}/logs", s.auth(s.dockerLogs))
+	m.HandleFunc("GET /api/docker/containers/{id}/inspect", s.auth(s.dockerInspect))
+	m.HandleFunc("GET /api/alerts", s.auth(s.alertsGet))
+	m.HandleFunc("PUT /api/alerts", s.auth(s.alertsPut))
+	m.HandleFunc("POST /api/alerts/test", s.auth(s.alertsTest))
 	m.HandleFunc("GET /api/fleet/sensors/query", s.sensorAuth(s.fleetQuery))
 	m.HandleFunc("POST /api/fleet/sensors/query", s.sensorAuth(s.fleetQuery))
 	m.HandleFunc("GET /api/services", s.auth(s.listServices))