Fold the certificate's order log away

The log of the last issuing run is only of interest when something went
wrong. It is a collapsed section now, open when the last run failed.

Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01AeFqV9dZrK6nipHkPfyM4F

pkgs/router-webui/certificate.go

@@ -188,6 +188,7 @@ type certificateData struct {
 	Errors    FormErrors
 	Providers []DNSProvider
 	Status    string // the order's last result
+	Failed    bool   // the last order did not succeed: the log is shown open
 	Log       string
 }
 
@@ -214,7 +215,9 @@ func (a *app) certificateData(s Settings, f ACMEForm, errs FormErrors) certifica
 	if first := splitList(f.Domains); len(first) > 0 && s.acme().Enabled {
 		unit := "acme-order-renew-" + strings.ToLower(first[0]) + ".service"
 		if st := unitProperty(unit, "ActiveState"); st != "" {
-			d.Status = st + ", result " + unitProperty(unit, "Result")
+			res := unitProperty(unit, "Result")
+			d.Status = st + ", result " + res
+			d.Failed = res != "success" || st == "failed"
 			d.Log, _ = command("journalctl", "--no-pager", "-o", "cat", "-n", "15", "-u", unit)
 		}
 	}