The save button awaited forceSaveNow and picked its toast from media state
alone. In cloud mode a failed durable outbox write is recorded on the queue
and returned normally, so the toast said Saved for work that was not even on
this device; a local save that threw left no toast, and one that skipped a
strategy missing from the library said Saved.

The toast now reads where the work is after the save. Local: Saved only if
the library was written after the press. Cloud: not saved when an outbox
write failed, otherwise the sync button's own states and words (synced,
syncing, offline, needs attention). Failures use the destructive toast. A
failed outbox write also reads as unverified in the sync popover instead of
merely unsent.

Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com>