Diagnose stalled administrator decisions from the operations page

Add an owner-only, read-only sample of at most ten live rooms whose public
pending interaction — decision, response, Truthtrance or phase opening — has
been idle longest, with the room code, idle duration, interaction kind, turn
and phase. GET /api/admin/operations?stalled=1 repeats live owner authority,
answers no-store, rejects any other query combination and repairs nothing;
paused, closed, removed and archived rooms are excluded and no private game
content is selected. The aggregate sample adds stalledRooms and
oldestStalledChange for the same predicate.

Owner-only unit coverage asserts the counters, the oldest stalled write, the
bounded oldest-first order, every exclusion boundary, idle arithmetic, the
absence of private content and the owner recheck after demotion. The anonymous
HTTP boundary denies the new read, and the full HTTP integration suite passes
55/55 against a local build of this revision. The panel was verified in the
real browser against six hours of genuine idle rooms, which caught and fixed a
missing threshold field in the response.

No game, seat, saved state, deployment, public start or played-save conversion
changes.

docs/CURRENT_STATUS.md

@@ -50,6 +50,16 @@ settles, without replaying payment or force transfer. A Terror entry already in
 flight and every Ambassador combination still reject. Selected decks/cache,
 shared-Duke/capture, force/payment and pending-effect guards remain.
 
+**In progress — administrator operations.** The owner-only operations page now
+also diagnoses [stalled decisions](ADMIN_STALLED_DECISIONS.md): a bounded,
+read-only sample of at most ten live rooms whose public pending interaction — a
+decision, response, Truthtrance or phase opening — has been idle longest, plus
+`stalledRooms` and `oldestStalledChange` counters in the aggregate sample.
+Paused, closed, removed and archived rooms are excluded and no private game
+content is selected; `GET /api/admin/operations?stalled=1` stays owner-only,
+`no-store` and read-only, and it repairs nothing. Failed-attempt records, disk
+capacity and maintenance controls remain.
+
 
 **Mixed E1/E2 and paired E3 Nexus — bounded Development Verified.**
 Original both-family Ix+CHOAM/union47 or both Ecaz+Moritani/ecaz33/classic