0.7: Update tray actions and status for image sessions #307

Parent: #289. Inspect source: #291.

Work boundary 9/13 from the approved 0.7 → clients → Inspect sequence.

Dependencies: #301, #305.

Audit every existing tray action against the image runtime. Keep business logic in service-owned APIs.

Acceptance criteria:

• Status and every existing action work on supported hosts.
• Image/lifecycle errors are truthful; companion lifecycle contracts still pass.

Planned PR boundaries: Tray-only polish and supported-host evidence.

Implementation progress and evidence: Sprinty in the isolated integration/0.7-clients-inspect worktree. Focused tests during development; fast checks/Citadel per PR; relevant black-box proof for runtime, credential or image boundaries. Respect the active release and machine locks.