Webapp: fix six live bugs found in the page inventory

- Report view: the hero summarised only the first erasure, so a drive whose
  Purge failed and Clear fallback succeeded showed Failed while the list said
  Successful. It now uses the per-drive outcome (report_result) and lists the
  standards that wiped each drive.
- To-do and ServiceNow: reports with no usable document id could never be
  ticked or cleared (400). They are now tracked by file name (file:<name>).
- Imaging: the LAPS password field is masked, with a Show/Hide toggle.
- Imaging: succeeded sessions not updated for ACTIVE_WINDOW_HOURS are hidden
  from the dashboard (failed and in-progress always stay), with Show all.
- Enrollment: the active SFLD package can no longer be deleted, which left
  ppkg.conf pointing at a missing file; its row is marked Active.
- Import: confirm before importing, saying upload-folder sources are moved
  and same-name files in the image are overwritten.

webapp/templates/enrollment.html

@@ -39,8 +39,9 @@
         </thead>
         <tbody>
           {% for p in packages %}
+          {% set is_active = active_ppkg and active_ppkg.SOURCE_PPKG and p.filename|lower == active_ppkg.SOURCE_PPKG|lower %}
           <tr>
-            <td><span class="mono"><i class="bi bi-file-earmark-zip"></i> {{ p.filename }}</span></td>
+            <td><span class="mono"><i class="bi bi-file-earmark-zip"></i> {{ p.filename }}</span>{% if is_active %} <span class="badge badge-info">Active</span>{% endif %}</td>
             <td>{{ "%.1f"|format(p.size / 1048576) }} MB</td>
             <td>{{ p.modified | timestamp_fmt }}</td>
             <td class="actions text-end text-nowrap">
@@ -48,11 +49,17 @@
                  class="btn btn-sm btn-outline-primary btn-row-action" title="Download">
                 <i class="bi bi-download"></i> Download
               </a>
+              {% if is_active %}
+              <button type="button" class="btn btn-sm btn-outline-secondary btn-row-action" disabled>
+                <i class="bi bi-lock"></i> Active
+              </button>
+              {% else %}
               <button type="button" class="btn btn-sm btn-outline-danger btn-row-action"
                       data-bs-toggle="modal" data-bs-target="#deleteModal"
                       data-filename="{{ p.filename }}" title="Delete">
                 <i class="bi bi-trash"></i> Delete
               </button>
+              {% endif %}
             </td>
           </tr>
           {% endfor %}