Get the Docker label inventory aggregated across the fleet

Fans out to every node's container label inventory and aggregates the inverted index by key, value, and source. Unreachable or malformed nodes degrade into nodeErrors rather than failing the whole request. Secret-like values are redacted unless the caller is an admin and passes reveal=1. Requires node:read permission.