Webapp: fix six live bugs found in the page inventory

- Report view: the hero summarised only the first erasure, so a drive whose
  Purge failed and Clear fallback succeeded showed Failed while the list said
  Successful. It now uses the per-drive outcome (report_result) and lists the
  standards that wiped each drive.
- To-do and ServiceNow: reports with no usable document id could never be
  ticked or cleared (400). They are now tracked by file name (file:<name>).
- Imaging: the LAPS password field is masked, with a Show/Hide toggle.
- Imaging: succeeded sessions not updated for ACTIVE_WINDOW_HOURS are hidden
  from the dashboard (failed and in-progress always stay), with Show all.
- Enrollment: the active SFLD package can no longer be deleted, which left
  ppkg.conf pointing at a missing file; its row is marked Active.
- Import: confirm before importing, saying upload-folder sources are moved
  and same-name files in the image are overwritten.

webapp/templates/_imaging_tiles.html

@@ -186,12 +186,14 @@
       <div class="mt-3 laps-card" data-serial="{{ s.serial }}">
         <div class="eyebrow mb-2">LAPS password QR (paste -> scan on bay - persists until cleared)</div>
         <div class="d-flex flex-wrap align-items-center gap-2">
-          <input type="text"
+          {# Masked: the tile is on a shared screen; Show reveals it while typing. #}
+          <input type="password"
                  class="form-control form-control-sm laps-input mono"
                  style="max-width: 22rem;"
                  placeholder="paste LAPS password from Intune portal here"
                  autocomplete="off"
                  value="{{ s.laps_password or '' }}">
+          <button type="button" class="btn btn-sm btn-outline-secondary laps-show-btn" aria-pressed="false">Show</button>
           <button type="button" class="btn btn-sm btn-primary laps-make-btn">{% if s.laps_password %}Update QR{% else %}Make QR{% endif %}</button>
           <button type="button" class="btn btn-sm btn-outline-secondary laps-clear-btn" {% if not s.laps_password %}style="display:none;"{% endif %}>Clear</button>
         </div>