fix(backup): pair tags and paths on one row in snapshot details

Tags and Paths were stacked full-width blocks, so a single tag chip and a
single path each burned a whole row and left the panel mostly empty. Wrap
them in a .bsm-blocks auto-fit grid that seats them side by side and falls
back to stacking under ~460px. The wrapper now owns the divider, so it
renders once for the pair instead of once per block, and is omitted
entirely when neither block has content.

Applied to both renderers of this markup: the global Backups view and the
per-app backup card.

Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>

containers/libreportal/frontend/components/backup/core/css/backup.css

@@ -1356,7 +1356,7 @@
 /* Snapshot detail panel. The shared .task-meta/.meta-item layout forces
    one nowrap line per item and clips long values (the full date, repo
    paths) mid-string, so the backup row gets its own label-over-value grid
-   plus full-width blocks for tags and paths that wrap cleanly. */
+   plus a paired tags/paths row that wraps cleanly. */
 .backup-snapshot-meta {
     display: flex;
     flex-direction: column;
@@ -1398,12 +1398,20 @@
     border-radius: 4px;
     word-break: break-all;
 }
+/* Tags and paths sit side by side on one row, dropping to a single column
+   when the panel is too narrow to give both a readable width. */
+.backup-snapshot-meta .bsm-blocks {
+    display: grid;
+    grid-template-columns: repeat(auto-fit, minmax(220px, 1fr));
+    gap: 14px 18px;
+    padding-top: 13px;
+    border-top: 1px solid rgba(var(--text-rgb), 0.08);
+}
 .backup-snapshot-meta .bsm-block {
     display: flex;
     flex-direction: column;
     gap: 8px;
-    padding-top: 13px;
+    min-width: 0;
-    border-top: 1px solid rgba(var(--text-rgb), 0.08);
 }
 .backup-snapshot-meta .bsm-tags {
     display: flex;

containers/libreportal/frontend/components/backup/snapshots/js/backup-snapshots.js

@@ -109,6 +109,8 @@ Object.assign(BackupPage.prototype, {
                             ${field('When', `<span title="${this.escape(this._fmtFullTime(r.time))}">${this.escape(this._fmtNiceTime(r.time))}</span>`)}
                             ${engineName ? field('Engine', this.escape(engineName)) : ''}
                         </div>
+                        ${otherTags.length || (r.paths && r.paths.length) ? `
+                        <div class="bsm-blocks">
                             ${otherTags.length ? `
                             <div class="bsm-block">
                                 <span class="bsm-label">Tags</span>
@@ -119,6 +121,7 @@ Object.assign(BackupPage.prototype, {
                                 <span class="bsm-label">Paths</span>
                                 <ul class="bsm-paths">${r.paths.map(p => `<li><code>${this.escape(p)}</code></li>`).join('')}</ul>
                             </div>` : ''}
+                        </div>` : ''}
                     </div>
                 </div>
             </div>`;

containers/libreportal/frontend/core/backup-card/js/backup-app-card.js

@@ -129,6 +129,8 @@ class BackupAppCard {
                             ${field('When', `<span title="${this.escape(this._fmtFull(s.time))}">${this.escape(this._fmtNice(s.time))}</span>`)}
                             ${engineName ? field('Engine', this.escape(engineName)) : ''}
                         </div>
+                        ${otherTags.length || (s.paths && s.paths.length) ? `
+                        <div class="bsm-blocks">
                             ${otherTags.length ? `
                             <div class="bsm-block">
                                 <span class="bsm-label">Tags</span>
@@ -139,6 +141,7 @@ class BackupAppCard {
                                 <span class="bsm-label">Paths</span>
                                 <ul class="bsm-paths">${s.paths.map(p => `<li><code>${this.escape(p)}</code></li>`).join('')}</ul>
                             </div>` : ''}
+                        </div>` : ''}
                     </div>
                 </div>
             </div>`;

containers/trivy/trivy.config

@@ -30,7 +30,7 @@ CFG_TRIVY_HEADSCALE=false
 CFG_TRIVY_CATEGORY="security,recommended"
 CFG_TRIVY_TITLE="Trivy"
 CFG_TRIVY_DESCRIPTION="Vulnerability scanner"
-CFG_TRIVY_LONG_DESCRIPTION="Trivy checks the container images behind your installed apps for known vulnerabilities (CVEs) and powers the Security view in the App Center Overview. Scanning happens entirely on your box against a locally cached database — nothing about your apps is sent anywhere"
+CFG_TRIVY_LONG_DESCRIPTION="Trivy checks the container images behind your installed apps for known vulnerabilities (CVEs)"
 CFG_TRIVY_URL="https://github.com/aquasecurity/trivy"
 CFG_TRIVY_ACTIONS="configure|install|restart|shutdown|uninstall"
 #