Dashboard: kind filters on Programs, tools off Services page, in-app confirm modals

- /services was returning every non-job deployment (tools, statics, remotes);
  filter it to kind==service so the Services page shows only services.
- Programs page gains kind-filter chips (All / Service / Job / Tool / Static /
  Reference) with per-kind counts, colored to match KindBadge.
- Replace window.confirm with a reusable ConfirmModal (styled, danger variant,
  Esc/Enter, preserves bulleted bodies); FormFooter's delete uses it, so program/
  service/job deletion now confirms in-app with the enumerated cascade list.

castle-api 58 passed; /services live drops from 37 to 15 (services only).

castle-api/tests/conftest.py

@@ -124,6 +124,13 @@ def registry_path(tmp_path: Path, castle_root: Path) -> Generator[Path, None, No
                 subdomain="test-svc",
                 managed=True,
             ),
+            # A deployed tool (path) — must NOT leak into the /services list.
+            "test-tool": Deployment(
+                manager="path",
+                run_cmd=[],
+                description="Test tool",
+                kind="tool",
+            ),
         },
     )
     save_registry(registry, reg_path)