feat(sync): /api/sync/health endpoint + dashboard health pill + MALFORMED UI

Backend:
- GET /api/sync/health returns {last_sync_at, last_sync_status,
  last_halt_reason, recent_phase_failures, escalation_phase, is_healthy}.
  healthy when last run was completed (or none yet), no phase has
  tripped the 3-in-a-row escalation, and recent failures <= 1.
- Dashboard + run-level endpoints include `malformed` count so the
  Defecte pill can render.

Frontend:
- Health pill in .sync-card-controls with three states — healthy
  (success green, check icon), warning (amber, triangle), escalated
  (error red, x-octagon + glow). Tooltip exposes the halt reason and
  the top phases with recent failures.
- Status-dot + badge add MALFORMED treatment via --compare orange,
  distinct from ERROR red. DESIGN.md notes the diagnostic rationale
  (ERROR = runtime, MALFORMED = payload source issue).
- Defecte filter pill on dashboard + logs pages. Mobile segmented
  control includes Defecte count. Counts wired to the malformed key.
- startSync() shows a native confirm modal when state is
  halted_escalation — operator override still possible, not silenced.
- ORDER_STATUS.MALFORMED mirror added to shared.js.
- Cache-bust: style.css v46, shared.js v47, dashboard.js v52,
  logs.js v16.

5 endpoint tests cover empty state, completed, failed, escalated,
single-failure warning. Full CI: 257 unit + 33 e2e green.

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>

api/app/static/js/dashboard.js

@@ -162,9 +162,76 @@ document.addEventListener('DOMContentLoaded', () => {
     });
 });
 
+// ── Sync Health pill ─────────────────────────────
+
+let _lastHealth = null;
+
+async function pollSyncHealth() {
+    try {
+        const data = await fetchJSON('/api/sync/health');
+        _lastHealth = data;
+        renderHealthPill(data);
+    } catch (e) { /* fail-soft: keep last state */ }
+}
+
+function renderHealthPill(h) {
+    const pill = document.getElementById('syncHealthPill');
+    if (!pill) return;
+    const icon = pill.querySelector('i');
+    const label = pill.querySelector('.health-pill-label');
+    let state = 'healthy', iconCls = 'bi-check-circle-fill', text = 'Sanatos', tooltip;
+
+    const recent = h.recent_phase_failures || {};
+    const recentCount = Object.values(recent).reduce((a, b) => a + (b || 0), 0);
+
+    if (h.escalation_phase || h.last_sync_status === 'halted_escalation') {
+        state = 'escalated';
+        iconCls = 'bi-x-octagon-fill';
+        text = 'Blocat';
+        tooltip = `Blocat — faza "${h.escalation_phase || '?'}" a esuat 3 sync-uri consecutive.\n`
+                + `Ultima eroare: ${h.last_halt_reason || '—'}\n`
+                + `Click Start Sync pentru override manual.`;
+    } else if (h.last_sync_status === 'failed' || recentCount > 0) {
+        state = 'warning';
+        iconCls = 'bi-exclamation-triangle-fill';
+        text = 'Atentie';
+        const topPhases = Object.entries(recent).slice(0, 3)
+            .map(([p, c]) => `${p} (${c} of last 3)`).join(', ');
+        tooltip = `Atentie — ${topPhases || 'sync anterior esuat'}`
+                + (h.last_halt_reason ? `\nLast error: ${h.last_halt_reason}` : '');
+    } else {
+        const lastAt = h.last_sync_at ? h.last_sync_at.replace('T', ' ').slice(5, 16) : 'nicio rulare';
+        tooltip = `Sanatos — ultimul sync: ${lastAt}`;
+    }
+
+    pill.className = 'health-pill ' + state;
+    pill.setAttribute('aria-label', `Sync: ${text}`);
+    pill.title = tooltip;
+    if (icon) icon.className = 'bi ' + iconCls;
+    if (label) label.textContent = text;
+}
+
+function startHealthPolling() {
+    pollSyncHealth();
+    setInterval(pollSyncHealth, 10000);
+}
+
+document.addEventListener('DOMContentLoaded', startHealthPolling);
+
 // ── Sync Controls ─────────────────────────────────
 
 async function startSync() {
+    // Escalation override — confirm before overriding the auto-halt
+    if (_lastHealth && (_lastHealth.escalation_phase
+        || _lastHealth.last_sync_status === 'halted_escalation')) {
+        const phase = _lastHealth.escalation_phase || '?';
+        const reason = _lastHealth.last_halt_reason || '(unknown)';
+        const msg = `⚠ Sync blocat automat\n\n`
+                  + `Faza "${phase}" a esuat in ultimele 3 sync-uri consecutive.\n`
+                  + `Ultima eroare: ${reason}\n\n`
+                  + `Repornesti oricum?`;
+        if (!confirm(msg)) return;
+    }
     try {
         const res = await fetch('/api/sync/start', { method: 'POST' });
         const data = await res.json();
@@ -174,6 +241,7 @@ async function startSync() {
         }
         // Polling will detect the running state — just speed it up immediately
         pollSyncStatus();
+        pollSyncHealth();
     } catch (err) {
         alert('Eroare: ' + err.message);
     }
@@ -329,6 +397,7 @@ async function loadDashOrders() {
         if (el('cntFact')) el('cntFact').textContent = c.facturate  || 0;
         if (el('cntNef'))  el('cntNef').textContent  = c.nefacturate || c.uninvoiced || 0;
         if (el('cntCanc')) el('cntCanc').textContent = c.cancelled || 0;
+        if (el('cntMal'))  el('cntMal').textContent  = c.malformed || 0;
         if (el('cntDiff')) el('cntDiff').textContent = c.diffs || 0;
 
         // Attention card
@@ -415,6 +484,7 @@ async function loadDashOrders() {
             { label: 'Fact.', count: c.facturate || 0, value: 'INVOICED', active: activeStatus === 'INVOICED', colorClass: 'fc-green' },
             { label: 'Nefact.', count: c.nefacturate || c.uninvoiced || 0, value: 'UNINVOICED', active: activeStatus === 'UNINVOICED', colorClass: 'fc-red' },
             { label: 'Anulate', count: c.cancelled || 0, value: ORDER_STATUS.CANCELLED, active: activeStatus === ORDER_STATUS.CANCELLED, colorClass: 'fc-dark' },
+            { label: 'Def.', count: c.malformed || 0, value: ORDER_STATUS.MALFORMED, active: activeStatus === ORDER_STATUS.MALFORMED, colorClass: 'fc-orange' },
             { label: 'Dif.', count: c.diffs || 0, value: 'DIFFS', active: activeStatus === 'DIFFS', colorClass: 'fc-orange' }
         ], (val) => {
             document.querySelectorAll('.filter-pill[data-status]').forEach(b => b.classList.remove('active'));