feat(activesync): ops snapshot service over State + SyncCache

[TDannhauer]

Parent

Epic: horde/ActiveSync#99
Depends on: horde/ActiveSync health evaluator (Ops DTOs)
Design: horde/ActiveSync doc/ops-monitor.md (§3, §8, Issue B)

Summary

Add a read-only SnapshotService in Core that builds fleet/device health from Horde_ActiveSyncState + SyncCache, using the ActiveSync Ops evaluator.

• Factory / injector binding
• Criteria: user, deviceId, activeWithin, healthMin, stuckOnly, limit, sort
• Optional per-device log path hint from Horde config (logging.type = perdevice)
• Unit tests with stub state

Acceptance

• Read-only (no wipe/block/reset)
• SQL state supported; Mongo best-effort via same State API
• Permission-agnostic (CLI/Web callers enforce admin rights)
• No duplicated heuristics (calls ActiveSync Ops types)

Consumers

• hordectl activesync …
• horde/admin/activesync.php health badges

[TDannhauer]

Note: admin UI consumer is horde/base (admin/activesync.php), not archived horde/horde. Tracker: horde/base#144

[TDannhauer]

CLI consumers are standalone horde-activesync in horde/base (#145/#146), not hordectl. Web consumer: horde/base#144