fix(noauth): show active free-tier pauses on the account card

[maxmad64bis]

Stacked on #15443. Only the last commit is this PR's; I'll rebase once it lands.
⚠️ base-red inherited: #15306

Summary

On the account card, a model paused for a few minutes fails with no explanation, like an outage. The pause lives in short-lived process memory that the card does not read. The card now shows an active pause with the refused model, the 429 motive and the return time, and hides it at the next 30-second refresh after the pause expires.

Related Issues

• No linked issue — reproduced on the release base

Validation

• Change type: UI
• Focused tests and category gates from the golden path
• npm run lint
• Reconciled with the current active release base; focused checks rerun afterward
• Production-code changes include a new or updated automated test in this PR

Tests Added Or Updated

• tests/unit/noauth-pause-visibility.test.ts: covers the pause reader (active, expired, empty, foreign provider, wide pause, off-contract model id), the visibility route (pause payload, 400 without provider, precedence over proxyId, legacy shape unchanged), and the card note rendering (model note with end/motive/instance, wide note, empty list → no note, fetch failure → legacy).

Coverage Notes

• open-sse/services/opencodeFreeTierSkip.ts: covered by the reader cases in tests/unit/noauth-pause-visibility.test.ts.
• src/app/api/admin/proxy-pool-visibility/route.ts: covered by the route cases in the same test file.
• src/shared/components/NoAuthAccountCard.tsx: the new note branch is covered by the 4 rendering cases in the same test file.
• New UI keys are translated in all 67 locale files.

Reviewer Notes

• Behavior: the card shows the first active pause and refreshes every 30 seconds, so an expired pause disappears at most 30 seconds after expiry; the list reflects the current instance.
• Merge: stacked on fix(auth): pause only the refused model on the no-auth path #15443; either order with feat(proxies): log refusal-store writes and expose transport evidence in pool visibility #15374 and fix(auth): serve only catalogued free-access models on credits-exhausted OpenRouter connections #15436. With feat(dashboard): token refresh failures can pause per account instead of blocking the whole provider #15469 (shared chatCore.ts): either order. With fix(auth): answer a paused no-auth provider with a retryable cooldown #15402 (shared no-auth files): either order.
• Follow-up: the three prefix-scan loops share no iterator yet; factoring them is left for a later change.

[rapha4lx]

That’s great. I dug a bit deeper to understand the cause of the errors and ran some tests. I analyzed how the package is currently assembled for submission via OpenCode and noticed a difference, so I adjusted the packaging process—whether submitted via the dashboard or the API—to ensure it is accepted correctly by OpenCode following the recent update.