Surface raw RCON reply bytes + Probe RCON button

"unparseable reply (34 bytes)" told us Plutonium answered but hid the
actual bytes, forcing another guess-and-check round. rconStatusResult
now emits a formatRawReply() hex + ASCII dump of the raw UDP payload on
every bad-reply, persisted in a new last_reply_snippet column so it
survives page loads.

Wrong-password detection widens beyond the "bad rcon" phrasing to
"(bad|invalid|wrong)…(rcon|password|pass)"; print-body replies that
don't match get their first non-header line surfaced verbatim so at
least *some* server-supplied text reaches the UI.

Probe RCON button (POST /api/servers/[name]/probe-rcon) fires the same
code path as the periodic sweep on demand, cuts the RCON iteration loop
from 30s per attempt to sub-second, and refreshes the header/roster/
health when it succeeds. Snippet <details> auto-opens on bad-reply so
the bytes are one glance away.

migrateServers() picks up the new column automatically via the
introspection path added last commit.

Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>

src/routes/api/servers/+server.ts

@@ -19,6 +19,7 @@ export async function GET() {
         ...s,
         roster: safeJson<RconPlayer[]>(s.last_roster),
         health: classifyHealth(s.last_seen_at, s.last_error),
+        replySnippet: s.last_reply_snippet,
         // Derived endpoint — same logic as endpointFor() but without asking
         // Komodo. If we don't have a port yet, endpoint is null.
         endpoint: s.game_port ? { host: s.rcon_host ?? rconHost, port: s.game_port } : null,