fix(kura): recover managed cache usage

Related to Sentry issue 124145394

This PR keeps the parts that are still relevant after rebasing on current origin/main.

• Adds regression coverage for the already-merged Kura reconciler behavior that moves observed pending deployments through :running before :succeeded.
• Makes the Tuist Kura hook tolerate runtimes that do not expose kura.env, falling back to the legacy cache access path instead of crashing authentication.
• Gives empty card illustrations a fixed flex slot so the Usage empty-state image cannot overlap its title.

The original reconciler implementation change is no longer included because origin/main already contains the equivalent fix.

How to test locally

• git diff --check origin/main...HEAD
• mise exec -- prettier -c assets/app/css/components/empty_card_section.css from server/
• Not rerun: full mise run --no-deps format --check and focused Mix tests are currently blocked locally by unrelated dependency resolver drift around thousand_island; the original PR run had Server Test and Kura checks passing, and the failing Server Format log pointed specifically to assets/app/css/components/empty_card_section.css.
• Live verification from the incident: patched the US West KuraInstance, recycled the three pods, and verified https://tuist-us-west-1.kura.tuist.dev/up returns 200.