perf(metrics): ask Sentinel to bucket metric history rows

Send bucket_ms on the Sentinel metric history reads so Sentinel averages
the rows and sends far fewer of them over SSH. Older Sentinels ignore the
param and return raw rows, which Coolify still buckets and downsamples.

Also quote the history URL in the single-fetch curl command, because the
URL now has an & in it.

tests/Feature/ServerMetricsPrefetchTest.php

@@ -68,6 +68,21 @@ it('falls back to one fetch per metric when the batch fails', function () {
         ->and($commands)->toHaveCount(2);
 });
 
+it('quotes the bucketed history URL in a single fetch for a non-root user', function () {
+    $commands = [];
+    Process::fake(function (PendingProcess $process) use (&$commands) {
+        $commands[] = $process->command;
+
+        return Process::result('[{"time":60000,"percent":5}]');
+    });
+    $this->server->forceFill(['user' => 'deploy'])->saveQuietly();
+
+    expect($this->server->getCpuMetrics(720))->toBe([[60000, 5.0]])
+        ->and($commands)->toHaveCount(1)
+        ->and($commands[0])->toContain('sudo bash -c')
+        ->and($commands[0])->toMatch('/"http:\/\/localhost:8888\/api\/cpu\/history\?from=[^"]+&bucket_ms=60000"/');
+});
+
 it('runs the batched metrics script with sudo for a non-root user', function () {
     $commands = [];
     Process::fake(function (PendingProcess $process) use (&$commands) {

tests/Unit/Metrics/HasMetricsMappingTest.php

@@ -13,10 +13,17 @@ class MetricsMappingDouble
     /** @var array<string, ?array> type => rows */
     public array $rowsByType = [];
 
+    public string $uuid = 'app-uuid';
+
     protected function fetchMetricRows(string $type, int $mins): ?array
     {
         return $this->rowsByType[$type] ?? null;
     }
+
+    public function endpoint(string $type, int $mins): string
+    {
+        return $this->getMetricsEndpoint($type, '2026-01-01T00:00:00Z', $mins);
+    }
 }
 
 it('keeps only the root mount for disk metrics', function () {
@@ -73,3 +80,12 @@ it('supports older disk rows without a mount field', function () {
 
     expect($double->getDiskMetrics(5))->toBe([[1000, 40.0]]);
 });
+
+it('asks sentinel to bucket ranges over an hour into at most 1000 whole-minute rows', function () {
+    $double = new MetricsMappingDouble;
+
+    expect($double->endpoint('cpu', 60))->not->toContain('bucket_ms')
+        ->and($double->endpoint('cpu', 720))->toBe('http://localhost:8888/api/container/app-uuid/cpu/history?from=2026-01-01T00:00:00Z&bucket_ms=60000')
+        ->and($double->endpoint('cpu', 10080))->toEndWith('&bucket_ms=660000')
+        ->and($double->endpoint('cpu', 43200))->toEndWith('&bucket_ms=2640000');
+});

tests/Unit/Services/SentinelMetricsClientTest.php

@@ -12,8 +12,12 @@ class FakeMetricsClient extends SentinelMetricsClient
     /** @var array<int, string> */
     public array $failing = [];
 
+    /** @var array<int, string> */
+    public array $urls = [];
+
     protected function raw(string $url): string
     {
+        $this->urls[] = $url;
         foreach ($this->failing as $needle) {
             if (str_contains($url, $needle)) {
                 throw new RuntimeException('boom');
@@ -247,3 +251,16 @@ it('prefers the root mount over the host mount of the Coolify data directory', f
 
     expect($client->history('disk', '24h'))->toBe([[1699999800000, 60.0]]);
 });
+
+it('asks sentinel to bucket history rows by range', function (string $range, int $bucketMs) {
+    $client = fakeMetricsClient();
+
+    $client->history('memory', $range);
+    $client->networkHistory($range);
+
+    expect($client->urls)->each->toContain("bucket_ms={$bucketMs}");
+})->with([
+    ['24h', 300_000],
+    ['7d', 1_800_000],
+    ['30d', 7_200_000],
+]);