feat: unified THE FORGE // SECTION headers and merged proxy routes

UI consistency
- ForgeHero now supports backHref, mono kicker, stats snippet, staggered
  entrance animation, and a registration-tick divider
- Every route now opens with the same "THE FORGE // SECTION" eyebrow: projects,
  sites, stacks, proxies, events, dns, deploy, settings, stale containers,
  site/project detail + env/volumes/browse, new site wizard
- Stacks list/detail/new moved to the shared hero and brand-anchor eyebrow
- Toolbars migrated from bespoke buttons to the shared .forge-btn utilities
- Sidebar footline adds a live UTC "forge clock" and a vim-style g-prefix
  quick-nav hint (g d/p/s/k/x/r/e/c jumps to each section)

Proxies page
- Server-side: merge static site proxy routes with instance routes and sort
  by domain (internal/api/proxies.go, internal/store/static_sites.go)
- ProxyRoute gains a Source field ("instance" | "static_site")
- Frontend adds source filter tabs and per-source labels/badges

web/src/lib/i18n/en.json

@@ -781,15 +781,22 @@
   },
   "proxies": {
     "title": "Proxy Routes",
-    "description": "Active proxy routes created by deployments.",
+    "description": "Active proxy routes from deployed containers and static sites.",
     "domain": "Domain",
-    "project": "Project",
-    "stage": "Stage",
+    "project": "Project / Site",
+    "stage": "Stage / Mode",
     "tag": "Tag",
     "port": "Port",
     "status": "Status",
+    "source": "Source",
+    "sourceContainer": "Container",
+    "sourceStatic": "Static Site",
+    "sourceDeno": "Deno Site",
+    "filterAll": "All",
+    "filterContainers": "Containers",
+    "filterSites": "Sites",
     "noRoutes": "No proxy routes",
-    "noRoutesDesc": "Proxy routes are created automatically when you deploy a container with proxy enabled.",
+    "noRoutesDesc": "Proxy routes are created automatically when you deploy a container with proxy enabled or publish a static site.",
     "searchPlaceholder": "Search by domain, project, or tag...",
     "noMatch": "No routes match your search.",
     "loadFailed": "Failed to load proxy routes",