Merge upstream/main: bikeshare Toronto and scoped city failures

Upstream's #641 (bikeshare Toronto, city failures scoped to range with
partial outages read DEGRADED/STALE) replaced the layer-level GBFS
error strings this branch had msg()-marked, in the two paths that
conflicted.

- ingestion.js/viewport.js taken as upstream's per-city
  _failedCityIds tracking; the layer-level error assignments are gone.
- 'GBFS fetch error' still reaches the panel via stats.error from
  controls.js, so its mark moved there (translateFeedError keeps
  translating it).
- 'GBFS status update failed' no longer exists anywhere: pruned from
  es/ru and from the layerStatusText SITES table, which now pins the
  controls.js site instead of the removed ones.

Also brings #581 (upstream-read caps, OpenSky 429 cooldown) - no i18n
surface.

npm run i18n: complete (2553), no unmarked strings. npm test: only the
pre-existing environmental OPENAI_API_KEY leak in devFreshDotenv fails.
Build passes.

src/i18n/layerStatusText.test.mjs

@@ -10,8 +10,7 @@ import { setLocale, translateKnown } from './index.js';
 const SITES = [
   ['../layers/streetLevel/index.js', 'loading coverage...'],
   ['../layers/firms/ingestion.js', 'live feed unavailable'],
-  ['../layers/bikeshare/viewport.js', 'GBFS fetch error'],
-  ['../layers/bikeshare/ingestion.js', 'GBFS status update failed'],
+  ['../layers/bikeshare/controls.js', 'GBFS fetch error'],
   [
     '../layers/streetLevel/viewerHost.js',
     'Open the Street Level panel to view imagery',