fix(wizard): clean up done-state banner and node-routed catalog form

[kaiweijw]

Summary

• Suppress the "Connection to CLI interrupted" banner once the Mode A wizard has reached its terminal done or cancelled stage. Heartbeat loss in those states is expected (the CLI process exits cleanly after /api/proxy/complete), and showing the red banner on top of the success screen made users think creation had failed.
• Mirror CustomServiceForm's via-node behavior into CatalogConfirmForm. When the wizard is launched with --via-node, the catalog form now hides the credential input, surfaces a "Routed via node" badge, and submits without a credential field — matching the backend contract that node-routed services authorize on the node agent.
• Refresh the embedded wizard bundle hash.

closes #595
closes #602

Test plan

• cd frontend && npm run lint && npm run test && npm run build
• cd frontend && npm run build:wizard
• cargo test -p nyxid-cli --test wizard_bundle_freshness
• Manual [Bug] [CLI Wizard] Success page still shows Connection to CLI interrupted #595: trigger a successful service-add via nyxid service add llm-openai, confirm the success screen no longer shows the "Connection to CLI interrupted" banner once the CLI exits.
• Manual [Bug] [CLI Wizard] service add <slug> --via-node still asks for an API key in browser wizard and fails with node-managed credential error #602: nyxid service add llm-openai --via-node <node-id>, confirm the wizard shows the node badge instead of the API key field, and the submit button reads "Connect via node" and produces a node_managed service.