feat: unified THE FORGE // SECTION headers and merged proxy routes

UI consistency
- ForgeHero now supports backHref, mono kicker, stats snippet, staggered
  entrance animation, and a registration-tick divider
- Every route now opens with the same "THE FORGE // SECTION" eyebrow: projects,
  sites, stacks, proxies, events, dns, deploy, settings, stale containers,
  site/project detail + env/volumes/browse, new site wizard
- Stacks list/detail/new moved to the shared hero and brand-anchor eyebrow
- Toolbars migrated from bespoke buttons to the shared .forge-btn utilities
- Sidebar footline adds a live UTC "forge clock" and a vim-style g-prefix
  quick-nav hint (g d/p/s/k/x/r/e/c jumps to each section)

Proxies page
- Server-side: merge static site proxy routes with instance routes and sort
  by domain (internal/api/proxies.go, internal/store/static_sites.go)
- ProxyRoute gains a Source field ("instance" | "static_site")
- Frontend adds source filter tabs and per-source labels/badges

internal/store/instances.go

@@ -119,8 +119,10 @@ func (s *Store) ListAllInstances() ([]Instance, error) {
 	return instances, rows.Err()
 }
 
-// ProxyRoute represents a proxy-enabled instance with project and stage names.
+// ProxyRoute represents a proxy-enabled resource (Docker instance or static site)
+// joined with the human-readable names needed to render the Proxies page.
 type ProxyRoute struct {
+	Source       string `json:"source"` // "instance" or "static_site"
 	InstanceID   string `json:"instance_id"`
 	ProjectID    string `json:"project_id"`
 	ProjectName  string `json:"project_name"`
@@ -164,6 +166,7 @@ func (s *Store) ListProxyRoutes(domain string) ([]ProxyRoute, error) {
 		); err != nil {
 			return nil, fmt.Errorf("scan proxy route: %w", err)
 		}
+		r.Source = "instance"
 		if domain != "" && r.Subdomain != "" {
 			r.Domain = r.Subdomain + "." + domain
 		}