Recheck asset reachability

On-demand reachability recheck, called from the viewer.

The viewer cannot attach operator BasicAuth credentials, so this endpoint uses a lightweight internal token derived from the shared anthias.conf secret instead. The request still remains side-effect-only and rate-limited: it returns no asset data, queue churn is debounced here, and the Celery task enforces the longer per-asset probe cooldown.