Analytics: make the pass, partial and fail indicators clickable

The three verdict cards on /analytics now open the same dialog as the https/ssh
cards, with the addresses of the run that got this verdict (CSV and copy
included). New list kinds verdict_pass, verdict_partial and verdict_fail in
GET /admin/analytics/runs/{id}/lists/{kind}: address, subnet, validator,
egress and ingress "ok of all", checks stored of expected; partial adds the
reason, the same names as the "Why partial" block. Cancelled addresses are not
listed; the row count equals summary.pass/partial/fail. The fail card stays
inert at zero. addr.incomplete() is shared by the list and the report.

Docs, plan and summary in docs/changes/.

Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>

internal/analytics/analytics.go

@@ -160,6 +160,10 @@ type addr struct {
 	lateFailed    int
 }
 
+// incomplete is true when fewer checks are stored than the cycle expected; an
+// unknown expectation (-1) is never incomplete.
+func (a *addr) incomplete() bool { return a.res.ExpectedChecks >= 0 && a.stored < a.res.ExpectedChecks }
+
 // Analysis is a computed report plus the per-address data the lists are cut from.
 type Analysis struct {
 	Report    Report
@@ -334,7 +338,7 @@ func Compute(in Input) (*Analysis, error) {
 
 		egFail := a.egress.ok < a.egress.n
 		inFail := a.ingress.ok < a.ingress.n
-		incomplete := a.res.ExpectedChecks >= 0 && a.stored < a.res.ExpectedChecks
+		incomplete := a.incomplete()
 		if incomplete {
 			rep.Quality.Incomplete++
 		}