Gate endpoint UI refresh on fresh telemetry and land endpoint agent

A command reaching 'succeeded' only proves the agent ran the action, not that it posted a new telemetry snapshot. Reloading panels on command success alone re-rendered stale service/process rows, so a stopped process could still show running right after Refresh Status.

Add a lightweight telemetrymeta probe exposing lastreportedat and gate both the header Refresh Status action and inline row Start/Stop on that stamp advancing past a pre-action baseline. Polling is bounded so an offline or idle agent never hangs the button, and messaging distinguishes a confirmed refresh from a queued one.

Bring the .NET endpoint agent source (service, tray, installer) into the repo so Cameron can merge and test, with an agent/.gitignore keeping bin/obj/publish out. Includes the DncMain launch-path fix, tray single-file host env scrub, and best-effort file logger.

plugins/endpoints/commands.py

@@ -69,9 +69,30 @@ COMMAND_ALLOWLIST = {
         'label': 'Check MTConnect',
         'description': 'Report whether the MTConnect UDC agent is running.',
     },
+    'system_restart': {
+        'label': 'Restart computer',
+        'description': 'Restart the endpoint computer immediately.',
+    },
+    'collect_now': {
+        'label': 'Collect now',
+        'description': 'Force the endpoint agent to report fresh telemetry off-cadence.',
+    },
 }
 
 
+# Actions that demand a permission stricter than the base endpoints.command.
+# The enqueue route requires the caller to ALSO hold the mapped permission, so a
+# destructive action (a remote reboot) is a heavier grant than a routine toggle.
+ELEVATED_ACTION_PERMISSIONS = {
+    'system_restart': 'endpoints.restart',
+}
+
+
+def elevated_permission_for(action):
+    """The extra permission an action requires, or None for routine actions."""
+    return ELEVATED_ACTION_PERMISSIONS.get(action)
+
+
 # Maps a monitored services/processes row to the start/stop/status actions that
 # control it, so the services panel can render an inline toggle on exactly the
 # rows that have a registered command action. The key is the agent-reported