feat: publish standalone worker

Separate worker packaging and service lifecycle from the control plane.

internal/webapp/templates/apps.html

@@ -0,0 +1,32 @@
+{{define "body"}}<section class="card">
+  <h1>Discovered apps</h1>
+  <p class="muted">Refreshed every 60s from <code>/proc</code>. Docker Compose / nginx / systemd discoveries land with the deploymentd integration (see docs/plans/inventory-management.md §7.2); once the host runs <code>deploymentd</code> and posts to RSMon, the matching Site + Deployment rows appear here side-by-side with the per-process list.</p>
+  <table>
+    <thead>
+      <tr>
+        <th>Name</th>
+        <th>Source</th>
+        <th>PID</th>
+        <th>Ports</th>
+        <th>Uptime</th>
+        <th>Last check</th>
+        <th></th>
+      </tr>
+    </thead>
+    <tbody>
+      {{range .Apps}}
+      <tr>
+        <td>{{.Name}}</td>
+        <td>{{.Source}}</td>
+        <td>{{.PID}}</td>
+        <td>{{range .Ports}}{{.}}<br>{{end}}</td>
+        <td>{{fmtTime .LastSeen}}</td>
+        <td>—</td>
+        <td><a href="/apps/{{.PID}}">details</a></td>
+      </tr>
+      {{else}}
+      <tr><td colspan="7" class="muted">No apps discovered yet — first refresh runs within 60s of start.</td></tr>
+      {{end}}
+    </tbody>
+  </table>
+</section>{{end}}