View update failures from the upgrade panel

Add a protected update log viewer in 1.0.11

Add View log to the superadmin upgrade panel, with refresh and copy controls. Inspect the latest worker's dependency checks, build errors and rollback output without asking an operator to retrieve it from the VPS.

The log endpoint checks the live superadmin role, disables caching, reads only the fixed private worker log, bounds output to 2 MiB, strips terminal controls and redacts common credential forms and known environment secrets. The UI renders the output as text and shows its modification time. Root-owned deployment journals remain separate, and the view explains when an attempt may not have produced a worker log.

Keep the package version at 1.0.11. Validated with npm run check, npm run build, log-reader regressions and a disposable production-server test of all roles, immediate role revocation, redaction, fixed-path access, caching and missing/empty/oversized logs. Browser automation was unavailable for an interactive dialog test.