Add resource offender breakdowns

[ovdmar]

Summary

• add typed resource offender breakdown contracts and a daemon endpoint for CPU, memory, disk, disk I/O, and Citadel process offenders
• make bottom-bar resource metrics hover/focus controls that open an immediate modal with loading state while fetching the top 5 offenders
• add focused backend, contract, and bottom-bar tests for the new breakdown behavior

Verification

• pnpm vitest run apps/daemon/src/system-health-route.test.ts apps/daemon/src/system-resource-offenders.test.ts apps/web/src/cockpit-bottom-bar.test.ts packages/contracts/src/system-health.test.ts
• pnpm typecheck && pnpm lint && pnpm check:arch && pnpm check:size && pnpm check:deps && pnpm build
• pnpm e2e --project=desktop (48 passed, 3 skipped)

Note: an earlier full make check coverage run wedged after an unrelated terminal WebSocket test timeout; rerunning that specific terminal spec passed, and the targeted/static/build/desktop E2E checks above passed.