Provider status: tell rejected API keys apart from unreachable hosts

A 404/405 on the model list counts as reachable (endpoint without a list).

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

web/src/components/Settings.tsx

@@ -372,7 +372,7 @@ function cleanModel(m: ModelRow) {
   return out;
 }
 
-type ProviderStatus = { up: boolean; error?: string; latency_ms: number; checked_at: number };
+type ProviderStatus = { up: boolean; state?: "ok" | "auth" | "down"; error?: string; latency_ms: number; checked_at: number };
 
 function ProviderEditor({ name, p, reload, status }: { name: string; p: Json; reload: () => void; status?: ProviderStatus }) {
   const t = useT();
@@ -445,7 +445,7 @@ function ProviderEditor({ name, p, reload, status }: { name: string; p: Json; re
             title={(status.error ?? "") + " · " + new Date(status.checked_at).toLocaleTimeString()}
           >
             <Icon name={status.up ? "check" : "warning"} size={12} />
-            {status.up ? t("settings.providerUp", { ms: status.latency_ms }) : t("settings.providerDown")}
+            {status.up ? t("settings.providerUp", { ms: status.latency_ms }) : status.state === "auth" ? t("settings.providerAuth") : t("settings.providerDown")}
           </span>
         )}
         <span className="spacer" />