feat(039): reorganize sidebar, add collapse + tooltips

Sidebar restructure:
  - Group navigation into Workspace / System sections with subtle
    uppercase labels — Dashboard sits solo at the top as the landing.
  - Workspace section holds the four priority items (Servers, Secrets,
    Activity Log, Security Scanners) with Agent Tokens nested as a
    second-level child under Secrets.
  - System section holds Repositories and Configuration, rendered at
    reduced weight (text-[13px], text-base-content/70) to signal they
    are secondary.
  - Remove Search entry — the top header already exposes a tools/servers
    search input.
  - Move Feedback out of the main nav to an icon button in the footer
    row next to the Theme dropdown, sized appropriately (h-9, w-5 icon)
    and flex-centered so it aligns correctly in both expanded and
    collapsed states.
  - Add inline SVG icons for every personal-edition nav item so the
    collapsed rail is recognisable at a glance.

Collapsible sidebar:
  - New sidebarCollapsed state + toggleSidebar action in the system
    store, persisted to localStorage under mcpproxy-sidebar-collapsed.
  - Sidebar animates between w-64 (expanded) and w-14 (icon rail). The
    main content padding in App.vue animates in lockstep.
  - Collapse chevron sits in the logo row when expanded; a separate
    expand chevron appears in the rail when collapsed.
  - Labels hide in collapsed mode; titles fall back to native tooltips
    for discoverability.

ServerCard tooltip:
  - Wrap the security scan badge in a DaisyUI tooltip that explains the
    current state (clean / N warnings / dangerous / failed / scanning /
    not scanned). Every variant includes the disclaimer that the score
    is an experimental heuristic and findings should be verified
    manually — so users don't over-trust a "Clean" label.

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

Author: claude

frontend/src/App.vue

@@ -2,8 +2,13 @@
   <div id="app" class="drawer lg:drawer-open">
     <input id="sidebar-drawer" type="checkbox" class="drawer-toggle" />
 
-    <!-- Main content area -->
-    <div class="drawer-content grid grid-rows-[auto_1fr] h-screen bg-base-200 lg:pl-64">
+    <!-- Main content area. The left padding is bound to sidebar collapsed
+         state so the content fluidly reclaims space when the sidebar shrinks
+         to its icon rail. -->
+    <div
+      class="drawer-content grid grid-rows-[auto_1fr] h-screen bg-base-200 transition-[padding] duration-200 ease-out"
+      :class="systemStore.sidebarCollapsed ? 'lg:pl-14' : 'lg:pl-64'"
+    >
       <!-- Top Header -->
       <TopHeader />
 

frontend/src/components/ServerCard.vue

@@ -56,9 +56,14 @@
         </div>
       </div>
 
-      <!-- Security scan badge (Spec 039) -->
+      <!-- Security scan badge (Spec 039)
+           Wrapped in a DaisyUI tooltip that explains the state and carries a
+           disclaimer that the risk score is an experimental heuristic. -->
       <div v-if="server.security_scan" class="flex items-center gap-2 mb-4">
-        <div class="flex items-center gap-1.5 text-sm">
+        <div
+          class="flex items-center gap-1.5 text-sm tooltip tooltip-right tooltip-bottom max-w-xs"
+          :data-tip="securityBadgeTooltip"
+        >
           <!-- Shield icon -->
           <svg
             class="w-4 h-4 flex-shrink-0"
@@ -376,6 +381,35 @@ const securityBadgeText = computed(() => {
   }
 })
 
+// Hover explanation for the security badge. Every state carries the
+// experimental-heuristic disclaimer so users don't over-trust the label.
+const securityBadgeTooltip = computed(() => {
+  const scan = props.server.security_scan
+  if (!scan) return ''
+  const disclaimer =
+    'Experimental heuristic — verify findings manually; results may not be precise.'
+  switch (scan.status) {
+    case 'clean':
+      return `Clean: no findings above the warning threshold in the most recent scan. ${disclaimer}`
+    case 'warnings': {
+      const count = scan.finding_counts?.warning ?? 0
+      return `${count} warning${count !== 1 ? 's' : ''} found — review the Security tab for details. ${disclaimer}`
+    }
+    case 'dangerous': {
+      const dangerous = scan.finding_counts?.dangerous ?? 0
+      return `${dangerous} dangerous finding${dangerous !== 1 ? 's' : ''} detected. Review before approving. ${disclaimer}`
+    }
+    case 'failed':
+      return `The last scan failed to produce a verdict. Re-run from the Security tab. ${disclaimer}`
+    case 'not_scanned':
+      return 'This server has not been scanned yet.'
+    case 'scanning':
+      return 'Security scan in progress…'
+    default:
+      return disclaimer
+  }
+})
+
 // Determine if error message should be shown (FR-018, FR-019)
 // Suppress verbose last_error when health.action already conveys the issue
 const shouldShowError = computed(() => {