Fix dashboard template bugs, acme date parsing, wireguard sudoers match, and stale docs

- dashboard.html: Fix zones, leases, wg_status, cert key names, add services var
- server.py: Pass services to dashboard template via _get_service_status()
- lib/acme.py: Fix dead third date format (%Y%m%d%H%M%z) using astimezone(UTC)
- lib/wireguard.py: Add -- separator to cp command to match sudoers rule
- lib/nginx.py: Replace shallow dict.copy() with {**...} for DEFAULT_SSL
- AGENTS.md: Update test count 149 -> 154
- docs/api.md: Rename cert field expiry -> expires_at

webui/api/proxy.py

@@ -30,10 +30,7 @@ def _error(msg, code=400):
 
 
 def _ok(data=None):
-    body = {"ok": True}
-    if data is not None:
-        body["data"] = data
-    return jsonify(body)
+    return jsonify({"ok": True, "data": data})
 
 
 # ---------------------------------------------------------------------------
@@ -120,7 +117,7 @@ def remove_domain_bp(domain):
 def apply_bp():
     try:
         apply()
-        return _ok({"message": "nginx configuration applied and reloaded"})
+        return _ok(None)
     except RuntimeError as exc:
         return _error(str(exc), 500)
 
@@ -128,10 +125,10 @@ def apply_bp():
 @bp.route("/test", methods=["POST"])
 def test_bp():
     try:
-        ok, message = test_config()
-        if ok:
-            return _ok({"passed": True, "message": message})
-        return jsonify({"ok": False, "error": message, "passed": False}), 400
+        valid, output = test_config()
+        if valid:
+            return _ok({"valid": True, "output": output})
+        return jsonify({"ok": False, "error": output, "valid": False}), 400
     except RuntimeError as exc:
         return _error(str(exc), 500)
 
@@ -153,7 +150,7 @@ def management_bp():
     auth_pass = body.get("auth_pass")
     try:
         set_management_proxy(domain, flask_host, int(flask_port), auth_user, auth_pass)
-        return _ok({"domain": domain})
+        return _ok(None)
     except (ValueError, RuntimeError) as exc:
         code = 400 if isinstance(exc, ValueError) else 500
         return _error(str(exc), code)