api+ui: kind-scoped save/delete endpoints and links

API: /config/{services,jobs,tools,static}/{name} now pin the twin they
target — _save_deployment/_delete_deployment take an explicit kind so a
patch to a 'backup' service can't bleed into a 'backup' job/tool. Add
/tools and /static endpoints; keep /deployments/{name} kind-agnostic.
New test_kind_twins proves per-kind save/delete isolation on disk.

UI: ConfigPanel and CreateDeploymentForm write to the kind-scoped
resource; GatewayPanel/NodeDetail/DeploymentsSection link via a shared
detailPath(name, kind) helper instead of the ambiguous /deployment/:name.

Includes incidental ruff-format reflow of untouched api files.

castle-api/tests/test_programs_commands.py

@@ -4,7 +4,9 @@ from fastapi.testclient import TestClient
 
 
 class TestProgramCommands:
-    def test_wired_in_program_surfaces_commands_and_repo(self, client: TestClient) -> None:
+    def test_wired_in_program_surfaces_commands_and_repo(
+        self, client: TestClient
+    ) -> None:
         """A stack-less adopted program exposes its declared commands + repo."""
         resp = client.get("/programs")
         assert resp.status_code == 200