webui: styling and cleanup

Vendor a Lucide icon set under static/img/icons/ and partial:ize the
inline SVGs across base, login, firmware, sidebar, and yang-tree.

Reorganize the sidebar with mirrored Status/Configure section labels.
Rename NACM to Users & Groups and Firmware to Software; swap Routes and
Routing between Status and Configure.

Split Configure > System into General, NTP Client, and DNS Client pages,
which opens up for relocating the Set Time RPC from the Maintenance
section to a new Date & Time card in the System General config page.

Update browser tab title on htmx navigation via an HX-Trigger
setPageTitle event; encode the payload as 7-bit ASCII so the middle
dot in "Page · Context" survives header transit.

Add missing hover-help ⓘ icons to bridge port configuration, and adjust
their alignment slightly.  While in interface configuration:
 - fix the annoying Save => collapse so one can edit multiple
   interface sections without having to re-expand the iface
 - add missing dhcpv4 settings
 - add missing custom mac (use advanced view for other settings)
 - clean up Save button mess (consolidate)

Rename Firmware -> Software everywhere in the Maintenance section and
fix "Install progress stuck at 10%" issue.

Signed-off-by: Joachim Wiberg <troglobit@gmail.com>

package/webui/webui.conf

@@ -1,6 +1,6 @@
 # Must be at server scope, not on an inner location: client_max_body_size
 # does not inherit into a nested location that declares its own proxy_pass,
-# and the http-level 1m default would silently apply and reject firmware
+# and the http-level 1m default would silently apply and reject bundle
 # uploads with 413.
 client_max_body_size 256m;
 
@@ -19,11 +19,21 @@ location = /login {
 # the Go handler's response close, producing RST instead of FIN at
 # Content-Length and a client-visible 502. nginx spools the body to
 # /var/cache/nginx/client-body during the upload instead.
-location = /firmware/upload {
+location = /software/upload {
     proxy_read_timeout 600s;
     include /etc/nginx/webui-proxy.conf;
 }
 
+# SSE progress stream: RAUC's Progress D-Bus property doesn't change while
+# it's writing a slot, so the upstream goes minutes without a frame. The
+# default 60 s proxy_read_timeout closes the stream and the browser sees
+# a transient error. Raise to cover a slow image write end-to-end.
+location = /software/progress {
+    proxy_read_timeout 1800s;
+    proxy_buffering off;
+    include /etc/nginx/webui-proxy.conf;
+}
+
 # Liveness probe — nginx-only, no upstream call. Used by the watchdog
 # div in base.html and the reboot-overlay poller.
 location = /device-status {