feat(workflow): scope docker publishes to changed services

Add a preflight change-detection job to the Docker publish workflow and
derive the build matrix from shared-root and service-specific path
filters. Preserve full publishes on manual dispatch while skipping
unaffected service image builds on routine pushes.

packages/frontend/src/components/StatusMonitor.vue

@@ -849,7 +849,7 @@ const copyIpToClipboard = async (ipAddress: string | null) => {
 .monitor-module-grid {
   display: grid;
   gap: 10px;
-  grid-template-columns: repeat(auto-fit, minmax(min(100%, 150px), 1fr));
+  grid-template-columns: 1fr;
 }
 
 .monitor-module {
@@ -861,6 +861,17 @@ const copyIpToClipboard = async (ipAddress: string | null) => {
   container-type: inline-size;
 }
 
+.monitor-module--usage,
+.monitor-module--memory,
+.monitor-module--network,
+.monitor-module--disk {
+  min-height: clamp(188px, 62cqw, 220px);
+}
+
+.monitor-module--process {
+  min-height: clamp(340px, 116cqw, 420px);
+}
+
 .monitor-module__heading {
   display: flex;
   align-items: flex-start;
@@ -1476,13 +1487,6 @@ const copyIpToClipboard = async (ipAddress: string | null) => {
   }
 }
 
-@container (min-width: 420px) {
-  .monitor-module--usage,
-  .monitor-module--process {
-    grid-column: 1 / -1;
-  }
-}
-
 @container (max-width: 250px) {
   .module-split--memory,
   .network-module__hero,