Say what a service state actually is, and make the badges readable

Three colour faults on the PC page, each hiding the next.

ACTIVITY BADGES WERE ALL GREY. The list renderer reads a badge colour from a
ROW FIELD, and the activity panel declared none, so every severity rendered
identically. The feed's whole job is to make a critical event visible and it
was painting it the same as a logon. The route now emits severitycolor - info
grey, warning yellow, critical red - and the panel declares it.

PAUSED AND THE TRANSITIONAL STATES WERE RED. statecolor was green-or-red-or-
grey, so a paused service looked like a stopped one. They are different: a
paused service was paused deliberately, and one stuck in Start Pending is
failing to start on a retry cycle - which is exactly what raises event 7011,
the thing behind the critical counts on the Fleet page. Both are amber now.

NAMED COLOURS ALWAYS GOT WHITE TEXT. readableText only parsed hex and returned
white for anything else, but panels emit NAMES. Green, red and grey are dark
enough that white worked by luck; amber is not, so the fix above shipped as
white-on-yellow and could not be read. Names resolve to hex before the contrast
test, so this holds for any named colour anywhere in the app rather than these
two panels.

colorStyle had no test file at all. It has one now.

Every one of these was found by looking at the rendered page. None of them
would fail a test that checked markup.

Full suite 2131 passed, vitest 273 passed.

plugins/endpoints/api/routes.py

@@ -44,6 +44,17 @@ def _service_running(entry):
     return raw in _RUNNING_STATES
 
 
+# Paused, plus the four transitional states Windows reports while a service is
+# on its way somewhere.
+_TRANSITIONAL_STATES = ('paused', 'start pending', 'stop pending',
+                        'continue pending', 'pause pending', 'starting',
+                        'stopping', 'pausing')
+
+
+def _service_transitional(raw):
+    return (raw or '').strip().lower() in _TRANSITIONAL_STATES
+
+
 def _service_name(entry):
     return entry.get('name') or entry.get('service') or 'Unknown'
 
@@ -465,7 +476,14 @@ def panel_services(asset_id: int):
             'name': name,
             'kind': (kind or '').lower() or None,
             'statelabel': 'Running' if running else (raw.title() or 'Unknown'),
-            'statecolor': 'green' if running else ('red' if raw else 'gray'),
+            # Amber for paused and the four Windows transitional states. A
+            # service stuck in Start Pending is failing to start on a retry
+            # cycle - which is what raises event 7011 - and a paused one was
+            # paused deliberately. Painting either the same red as Stopped
+            # loses the distinction that tells you which to chase.
+            'statecolor': ('green' if running
+                           else 'yellow' if _service_transitional(raw)
+                           else 'red' if raw else 'gray'),
         }
         # Only offer Start/Stop to a caller who could actually run it. The
         # emission never consulted the caller, so a read-only viewer was shown
@@ -601,9 +619,15 @@ def panel_activity(asset_id: int):
                       key=lambda r: (r['eventtime'] is not None, r['eventtime']),
                       reverse=True)
 
+    # The list renderer reads a badge colour from a ROW FIELD, so without this
+    # every badge falls back to grey and the feed loses the one signal it is
+    # there to carry.
+    colours = {'critical': 'red', 'warning': 'yellow', 'info': 'gray'}
+
     return success_response([{
         'title': r['title'],
         'severity': r['severity'],
+        'severitycolor': colours.get(r['severity'], 'gray'),
         'detail': r['detail'],
         'eventtime': r['eventtime'].isoformat() + 'Z' if r['eventtime'] else None,
     } for r in rows[:15]])