fix: ServiceStatusData deserialization, audit_action enum, and agent HTTP client

- Fix ServiceStatusData to match agent response (active_state, sub_state, etc.)
- Add migration 009 for health_check audit_action enum values
- Fix build_agent_http_client: use rustls TLS with mTLS instead of danger_accept_invalid_certs
- Add detailed error logging for agent HTTP client builder

migrations/009_health_check_audit_actions.sql

@@ -0,0 +1,4 @@
+-- Add health check audit_action enum values
+ALTER TYPE audit_action ADD VALUE IF NOT EXISTS 'health_check_created';
+ALTER TYPE audit_action ADD VALUE IF NOT EXISTS 'health_check_updated';
+ALTER TYPE audit_action ADD VALUE IF NOT EXISTS 'health_check_deleted';