blancco: CMMC evidence pack, ServiceNow tick list, cloud-upload status

Automates the Blancco parts of the onsite-support CMMC playbook:

- ENT-056/158 evidence pack: /reports/evidence?month=YYYY-MM returns
  ENT-056_<Site>_<YYYY-MM>.zip (summary.csv, README, each report's XML
  and PDF). pxe-blancco-evidence.timer saves last month's pack to the
  reports share's evidence/ folder on the 1st (Persistent).
- ENT-045/159 ServiceNow tick list: /reports/servicenow lists recent
  reports as "Wiped" or "Blancco Wipe failed" with a pre-written
  destruction note, copy buttons and Done (CSRF-protected).
- Cloud upload: blancco-progress.py posts each report's upload result
  ("Sending report document id" -> "Report sent to MC") to
  /reports/cloud-status (CSRF-exempt like /imaging/status); the Reports
  page and the CSVs show it, so a wipe missing from BMP is visible.
- CSV gains failure_reason (exception messages, failed steps, error
  counts), business_location and cloud_upload.
- Preferences: business_location "West Jefferson" (config.BLANCCO_SITE)
  and pdf+xml reports; the report copier now copies the PDF too, named
  after its XML. .part and hidden files are not listed as reports.

State (cloud confirmations, ServiceNow ticks) is a JSON file at
/var/lib/pxe-webapp/blancco-state.json, off the report share.

webapp/templates/reports.html

@@ -29,6 +29,23 @@
   <p class="small text-muted mt-2 mb-0">Dated by the timestamp inside each report, not the file date.</p>
 </div>
 
+<div class="section-card">
+  <div class="section-title">CMMC Evidence - {{ site }}</div>
+  <div class="d-flex flex-wrap align-items-center gap-3">
+    <form method="get" action="{{ url_for('blancco_evidence_pack') }}" class="d-flex flex-wrap align-items-center gap-2">
+      <label for="evidenceMonth" class="mb-0">Evidence pack (ENT-056/158) for</label>
+      <input id="evidenceMonth" type="month" name="month" value="{{ last_month }}" class="form-control form-control-sm w-auto" required>
+      <button type="submit" class="pxe-btn pxe-btn-secondary" title="summary.csv plus every report's XML and PDF for that month">
+        <i class="bi bi-file-zip"></i> Download
+      </button>
+    </form>
+    <a href="{{ url_for('blancco_servicenow') }}" class="pxe-btn pxe-btn-secondary" title="What to tick on each Onsite Bin Management RITM">
+      <i class="bi bi-list-check"></i> ServiceNow tick list (ENT-045/159)
+    </a>
+  </div>
+  <p class="small text-muted mt-2 mb-0">The evidence pack for last month is also saved automatically to <span class="mono">evidence\</span> on the reports share on the 1st. Certificates of record are in the Blancco Management Portal.</p>
+</div>
+
 <div class="section-card">
   <div class="section-title">Drive Erasure Certificates</div>
   {% if reports %}
@@ -40,6 +57,7 @@
           <th>Model</th>
           <th>Date</th>
           <th>Result</th>
+          <th title="Whether Blancco reported uploading this report to the Blancco cloud">Cloud</th>
           <th class="text-end">Actions</th>
         </tr>
       </thead>
@@ -55,6 +73,11 @@
             {% elif r.state %}<span class="badge badge-secondary">{{ r.state }}</span>
             {% else %}<span class="text-muted">-</span>{% endif %}
           </td>
+          <td>
+            {% if r.cloud == 'sent' %}<span class="badge badge-success">Sent</span>
+            {% elif r.cloud == 'failed' %}<span class="badge badge-danger" title="Resend from Blancco, or upload the XML to the Blancco portal">Not sent</span>
+            {% else %}<span class="text-muted" title="No upload status recorded (older report, or saved manually)">-</span>{% endif %}
+          </td>
           <td class="actions text-end text-nowrap">
             {% if r.filename.lower().endswith('.xml') %}
             <a href="{{ url_for('blancco_view_report', filename=r.filename) }}"