Harden platform security, reliability, and CI after full audit.

Close deployment IDOR and gate stub payment endpoints, add production
secret validation, health probes, Redis-backed build progress, GitHub
Actions CI, expanded tests, billing/k8s refactors, and ops runbooks.

Co-authored-by: Cursor <cursoragent@cursor.com>

frontend/src/app/[lang]/dashboard/apps/page.tsx

@@ -15,29 +15,19 @@ import {
 } from '@/components/deleting-overlay';
 import { filterApplications } from '@/lib/product-type';
 import { useApplicationDelete } from '@/lib/use-application-delete';
+import {
+  deploymentStatusBadgeClass,
+  deploymentStatusLabel,
+  lifecycleStatusClass,
+} from '@/lib/app-list-utils';
 
-const statusColors: Record<string, string> = {
-  running: 'badge-green',
-  pending: 'badge-yellow',
-  building: 'badge-blue',
-  deploying: 'badge-blue',
-  failed: 'badge-red',
-  build_failed: 'badge-red',
-  cancelled: 'badge-gray',
-  stopped: 'badge-gray',
-};
-
-const lifecycleColors: Record<string, string> = {
-  active: 'text-green-600 bg-green-50',
-  suspended: 'text-amber-700 bg-amber-50',
-  pending_deletion: 'text-red-700 bg-red-50',
-  deleted: 'text-gray-500 bg-gray-100',
-};
+const statusColors = deploymentStatusBadgeClass;
+const lifecycleColors = lifecycleStatusClass;
 
 type AppsDict = Dictionary['dashboard']['apps'];
 
 function statusLabel(status: string, t: Dictionary): string {
-  return (t.dashboard.status as Record<string, string>)[status] ?? status;
+  return deploymentStatusLabel(status, t);
 }
 
 function lifecycleLabel(lifecycle: string, a: AppsDict): string {