The toolbar's panel says which commit the page is serving and when it went live, linked to the commit #11480

Intent: "never lost" includes knowing what you are looking at. The pill names the app and the environment; a person asking "is this my latest push?" has to leave.

Done:

• [ ] The panel adds one line: Serving a1b2c3d, live 4 min ago with the short id linked to the commit on the forge; the id and the time come from the forge's own record of the running environment (the same source the note's "Where this came from" uses), never from the client.
• [ ] The values travel as escaped data-* attributes and are set as text; a missing record leaves the line out.
• [ ] Test in the style of test/toolbar*.test.ts: the line is there with a record, absent without, and an app name carrying markup stays text.
• [ ] docs/features/forge-toolbar.md says it; looks in light and dark on the pull.

Files: src/apps/toolbar.ts, test/toolbar-serving.test.ts, docs/features/forge-toolbar.md Risks: the script's hash changes with every edit: tests that pin it must follow; no layout shift Brief: a web builder (scout). A person assigns. Every behaviour added has a test that fails without it; bun test passes; touching src/web runs bun scripts/design-lint.ts.