Preserve onboarding auth in operator UI

[shaypal5]

Summary

• preserve onboardingAuth when normalizing operator agent payloads into dashboard state
• support both normalized camelCase and raw snake_case auth evidence fields
• fixes pending onboarding cards showing missing auth even when durable storage reports verified

Verification

• npm run check
• npm run test
• npm run build