feat(v5): add server reconciliation and canvas APIs

Split V5 dashboard behavior into domain controllers and policies,
add agent token rotation/revocation, status reconciliation jobs,
ingress firewall syncing, and canvas connection APIs.

Add migrations for V5 status tracking, server capabilities, resource
connection aliases, and revoked agent tokens.

app/Models/Team.php

@@ -4,6 +4,7 @@ namespace App\Models;
 
 use App\Actions\User\RevokeUserTeamTokens;
 use App\Events\ServerReachabilityChanged;
+use App\Jobs\V5TeardownTeamJob;
 use App\Notifications\Channels\SendsDiscord;
 use App\Notifications\Channels\SendsEmail;
 use App\Notifications\Channels\SendsPushover;
@@ -75,6 +76,17 @@ class Team extends Model implements SendsDiscord, SendsEmail, SendsPushover, Sen
         });
 
         static::deleting(function (Team $team) {
+            // Best-effort on-host teardown of this team's v5 resources BEFORE the
+            // DB cascade removes the servers/applications/private keys. Captured
+            // synchronously into a queued job so an unreachable host cannot block
+            // or fail the team deletion (see V5TeardownTeamJob). Guarded so a v5
+            // teardown problem never breaks v4 team deletion.
+            try {
+                V5TeardownTeamJob::dispatchForTeam($team);
+            } catch (\Throwable $exception) {
+                report($exception);
+            }
+
             RevokeUserTeamTokens::forTeam($team->id);
 
             foreach ($team->privateKeys as $key) {