Overhaul: real metrics, Git integration UI, open-source hygiene, root cleanup

Backend:
- GET /services/:id/metrics with real Docker container stats
- DELETE /git/providers/:id and GET repo branches endpoint

Frontend:
- Service detail shows real telemetry or honest empty states
- Live status distinguishes idle/polling/reconnecting
- Git providers section in Settings; repo+branch pickers in Add Service
- Real logo, compact Projects header, canvas fitView fix
- index.css deduplicated (1725 -> 1384 lines)
- Fixed smoke tests, lint errors, ToastProvider/context unification

Repo hygiene:
- Added LICENSE (MIT), CONTRIBUTING.md, SECURITY.md; rewrote README
- Untracked .env.prod and data/letsencrypt secrets; fixed .gitignore
- Removed legacy root src/internal/cmd and stale configs/docs/artifacts
- Moved guides and design references under docs/

Generated with [Devin](https://devin.ai)

Co-Authored-By: Devin <158243242+devin-ai-integration[bot]@users.noreply.github.com>

app/frontend/src/lib/use-build-updates.ts

@@ -17,10 +17,12 @@ function toWebSocketUrl(apiBase: string): string {
   return `${wsBase}/ws`;
 }
 
+export type LiveSyncStatus = 'idle' | 'offline' | 'live';
+
 export function useBuildUpdates(
   buildIds: string[],
   onBuildUpdate: (payload: BuildUpdatePayload) => void,
-): boolean {
+): LiveSyncStatus {
   const [connected, setConnected] = useState(false);
   const callbackRef = useRef(onBuildUpdate);
   useEffect(() => {
@@ -127,5 +129,8 @@ export function useBuildUpdates(
     };
   }, [buildIdsKey, subscriptionIds]);
 
-  return subscriptionIds.length > 0 && connected;
+  if (subscriptionIds.length === 0) {
+    return 'idle';
+  }
+  return connected ? 'live' : 'offline';
 }