Source status

Every primary source we query, its mode and current status. Each source runs a nightly canary against a known-good record; two consecutive failures flip it to degraded and it answers unable_to_verify(source_degraded) until it passes again. Dataset-backed sources show the publisher's data date; a dataset past its maximum age answers source_stale rather than a clear.