Resolves #3608513: Trend read path, dashboard, staleness surfacing

Phase C of the results store: TrendRepository read path, the report at /admin/reports/site-doctor (restrict-flagged permission, merged changes feed with one pager, plain-language labels, SVG trends with retention horizons printed), cache-tag invalidation at publish, and the status-report staleness line. See the issue summary for the design.