fix: improve host diagnostics, storage handling, and maintenance workflows

- add zero-downtime Proxmox TLS certificate refresh from the Security panel (#307)
- classify storage availability independently from missing capacity information (#309)
- update ZFS ARC sizing and safely reconcile conflicting module configurations
- preserve and restore migrated ZFS settings without overwriting later administrator changes
- stop memory optimization from forcing the kernel overcommit policy
- correlate multi-line OOM events and identify the affected LXC, cgroup limits, swap and killed process
- add selectable Bash prompt path styles and clearer shell activation guidance
- protect technical names during automatic translation and correct localized terminology
- update the Coral and VM/LXC Apps and Updates documentation, translations and screenshots

AppImage/messages/en/common.json

@@ -187,6 +187,7 @@
     "notMonitored": "not monitored",
     "namespaceRestricted": "namespace-restricted",
     "namespaceRestrictedTitle": "Storage reachable; datastore size hidden by ACL (e.g. PBS DatastoreAdmin on a single namespace)",
+    "capacityNotReported": "Capacity not reported",
     "managedByProxmox": "managed by Proxmox",
     "readOnlyShort": "ro",
     "stale": "stale",
@@ -1283,7 +1284,6 @@
       "dockerImagesTitle": "Docker images",
       "dockerAppTitle": "Docker",
       "dockerImagesSubheading": "Images",
-      "dockerImagesReadOnly": "Image tags are compared by registry digest. Compose services can be pulled and recreated from their declared project.",
       "dockerEngineManagedByOs": "Docker Engine {version} is package-managed and is updated by the OS packages action above.",
       "dockerEngineSubheading": "Engine",
       "dockerEngineDetected": "Docker Engine {version} detected",
@@ -2175,6 +2175,7 @@
       "noTokenReceived": "No token was returned by the server.",
       "generateTokenRetry": "Failed to generate token. Please try again.",
       "configureSslFailed": "Failed to configure SSL",
+      "reloadSslFailed": "Failed to update the active certificate",
       "disableSslFailed": "Failed to disable SSL",
       "deleteReportFailed": "Failed to delete report"
     },
@@ -2202,6 +2203,8 @@
       "apiTokenGenerated": "API token was generated.",
       "sslEnabledRestarting": "HTTPS is enabled. Restarting service...",
       "sslDisabledRestarting": "HTTPS is disabled. Restarting service...",
+      "sslCertificateReloaded": "The renewed certificate is now active. Existing connections were not interrupted.",
+      "sslCertificateUnchanged": "The active certificate already matches the current certificate files.",
       "reportDeleted": "Audit report was deleted.",
       "twoFactorEnabled": "Two-factor authentication is enabled."
     },
@@ -2266,6 +2269,8 @@
       "activeCertificate": "Active certificate",
       "cert": "Certificate",
       "key": "Private key",
+      "updateCertificate": "Update certificate",
+      "updatingCertificate": "Updating...",
       "disabling": "Disabling...",
       "restarting": "Restarting...",
       "disableHttps": "Disable HTTPS",