feat: prototype Reliability Inbox evidence workflow

[oleiade]

Summary

• adds an experimental Reliability Inbox entry point under Synthetics with a prioritized review queue and decision-oriented recommendation detail
• fetches live aggregate suggestions from the environment- and region-matched k6-experiments service in dev and ops
• provides an Assistant-guided “Review and customize check” workflow that starts from a proposed HTTP check and requires explicit confirmation before anything is created
• introduces compact, Grafana-native evidence presentation, including the Graft-only demo traffic trend, honest methodology disclosure, and a provenance-gated “View in Explore” path
• aligns endpoint presentation, navigation, progressive disclosure, Assistant styling, and proposed-check review with Grafana design patterns

Prototype scope

This remains intentionally an experimental frontend/Graft prototype. As of commit 3e989ed4, the recommendation queue uses the deployed reliability-inbox suggestions API in dev and ops instead of the static Graft resource. Production remains disabled until the service is deployed there.

The live call currently uses a temporary Graft-compatible path: the browser creates an SM API token, derives the co-located k6-experiments endpoint from the configured SM API host, and calls it directly via CORS. Graft cannot register new server-side datasource proxy routes on the remote Grafana instance. Before a production rollout, this should be replaced with a released datasource proxy route or equivalent server-side routing that reuses the stored SM token without creating or exposing one in the browser.

The demo time series, exact request total, and optional Explore provenance remain explicitly separated from the live aggregate suggestion contract. Production backend support is still required before those evidence claims can be generated from live data.

User impact

Users on supported dev and ops stacks can discover live monitoring opportunities from the Synthetics home page, compare a compact recommendation queue, inspect evidence and monitoring-status caveats, review a human-readable proposed check, and open a bounded Assistant setup flow without creating or saving anything until they confirm.

Because the temporary integration creates an API token, users without SM write permission cannot currently load live suggestions. Resolving this is part of the production proxy/auth work described above.

Validation

• yarn lint
• yarn typecheck
• yarn test --runInBand — 216 suites and 1,794 tests passed at the earlier prototype snapshot
• yarn build
• yarn test src/datasource/reliabilityInboxRegion.test.ts src/features/reliabilityInbox/model.test.ts --runInBand — 2 suites and 29 tests passed for the live-service integration

[cla-assistant]

All committers have signed the CLA.

[github-actions]

Script size changes

Name	+/-	Main	This PR	Outcome
[731.js]	=	6,624.40 kB	6,624.40 kB	✅
[87.js]	+1.81%	3,616.82 kB	3,682.29 kB	✅
[469.js]	=	506.85 kB	506.85 kB	✅
[datasource/module.js]	+3.43%	119.68 kB	123.78 kB	✅
[9.js]	=	99.10 kB	99.10 kB	✅
[628.js]	=	92.69 kB	92.69 kB	✅
[692.js]	+0.12%	67.57 kB	67.66 kB	✅
[590.js]	+0.17%	47.64 kB	47.73 kB	✅
[module.js]	=	35.29 kB	35.29 kB	✅
[546.js]	=	26.64 kB	26.64 kB	✅
[294.js]	=	22.06 kB	22.06 kB	✅
[466.js]	=	5.15 kB	5.15 kB	✅
[131.js]	=	5.00 kB	5.00 kB	✅
[845.js]	=	3.25 kB	3.25 kB	✅
[295.js]	=	2.79 kB	2.79 kB	✅

Totals

Name	+/-	Main	This PR	Outcome
[Scripts]	+0.62%	11,274.92 kB	11,344.67 kB	✅
[Non-script Assets]	=	1,472.08 kB	1,472.08 kB	✅
[All]	+0.55%	12,747.00 kB	12,816.75 kB	✅

Generated by 🚫 dangerJS against 3c3bf3a

[cla-assistant]

Thank you for your submission! We really appreciate it. Like many open source projects, we ask that you sign our Contributor License Agreement before we can accept your contribution.
_{You have signed the CLA already but the status is still pending? Let us recheck it.}