Add bin/pip-status.sh health check + control panel

Single command for operators to see the deployment at a glance:

- Public-URL probe through Caddy
- Compose service status (NAME / SERVICE / STATE / HEALTH / PORTS)
- Container resource snapshot from docker stats (CPU%, mem usage,
  mem%, network I/O, block I/O), filtered to compose-managed
  containers for this project
- Host disk: DATA_ROOT filesystem free space plus per-subdir sizes
  for postgres/, storage/, ollama/, caddy/, backups/
- Host load / memory / uptime

Modes:
  bin/pip-status.sh                  status + interactive menu (TTY)
  bin/pip-status.sh --status         one-shot, no menu
  bin/pip-status.sh --restart NAME   status, then compose restart NAME
  bin/pip-status.sh --restart-all    status, then compose restart all
  bin/pip-status.sh --watch          refresh every 2s, ctrl-C to exit

Interactive menu numbers services so the operator picks by index
rather than typing the full container name. Restart-all prompts for
confirmation. Logs option tails the last 50 lines of any service.