homepage: polish pass (C)

services.yaml:
- ANA-Firewall: href + siteMonitor both point at the IP now (was href
  to FQDN but siteMonitor to IP — inconsistent)
- PFI-VM-Docker, NH3-SW1, NH3-VM-Docker, ESH-VM-Docker: upgrade from
  `ping:` to `siteMonitor:` against the href URL so the up/down dot
  reflects whether the web UI actually responds, not just ICMP

dockge canonical:
- icon sh-dockge.png (was si-portainer — wrong project). Applies to all
  five fleet Dockge instances once their compose files are redeployed.

Per-group colors investigated but not supported by homepage (only site-
wide `color:` exists); skipped.

configs/homepage/services.yaml

@@ -52,10 +52,10 @@
 
 - Infra - ANA:
   - ANA-Firewall:
-      href: https://ana-fw.phasefinal.com/
+      href: https://10.250.250.1
       icon: mdi-wall-fire
       siteMonitor: https://10.250.250.1
-      description: ana-gw Fortigate 81F
+      description: ana-gw Fortigate 81F (ana-fw.phasefinal.com)
   - PFI-r750xs-iDRAC:
       href: https://10.250.250.30/
       siteMonitor: https://10.250.250.30/
@@ -78,7 +78,7 @@
   - PFI-VM-Docker:
       href: http://10.250.50.70:5001
       icon: si-docker
-      ping: 10.250.50.70
+      siteMonitor: http://10.250.50.70:5001
       description: Docker VM (ana-docker, Dockge at :5001)
   - PFI-ANA-ML2:
       ping: 10.250.50.54
@@ -98,7 +98,7 @@
   - NH3-SW1:
       href: https://10.100.250.2
       icon: mdi-switch
-      ping: 10.100.250.2
+      siteMonitor: https://10.100.250.2
       description: Mikrotik CRS328-24P-4S+
   - NH3-NAS:
       href: https://10.100.50.50:5001
@@ -113,7 +113,7 @@
   - NH3-VM-Docker:
       href: http://10.100.50.40:5001
       icon: si-docker
-      ping: 10.100.50.40
+      siteMonitor: http://10.100.50.40:5001
       description: Docker VM (nh3-docker, Dockge at :5001)
   - NH3-Ansible:
       ping: 10.100.50.42
@@ -153,7 +153,7 @@
   - ESH-VM-Docker:
       href: http://10.0.50.45:5001
       icon: si-docker
-      ping: 10.0.50.45
+      siteMonitor: http://10.0.50.45:5001
       description: Docker VM (esh-docker-vm, Dockge at :5001)
 
 # Service Networking group is now fully Docker-auto-discovered (Traefik ×2,

stacks/dockge/compose.yaml

@@ -24,7 +24,7 @@ services:
     labels:
       - homepage.group=Service Networking
       - homepage.name=Dockge (${DOCKGE_HOST_LABEL})
-      - homepage.icon=si-portainer
+      - homepage.icon=sh-dockge.png
       - homepage.description=Compose UI on ${DOCKGE_HOST_LABEL}
       - homepage.href=http://${DOCKGE_HOST_IP}:${DOCKGE_PORT:-5001}