spa hardening, offline logging, rate limit fixes

server:
- backup exporter, auth extractors, error shapes, CONTEXT (prior work)
- spa assets served outside the rate limit via route_layer
- requests_per_second went to per_second(), which takes an interval not a
  rate: 50 meant one request per 50s once burst was spent. now converted
  properly. 15/s, burst 60

spa fixes:
- account delete cleared snake_case token keys that were never written
- refresh interceptor could retry forever
- date ranges used local day boundaries stamped +00:00
- "all" period trend plotted one page; calendar days fabricated mood 3
- chart grid invisible: hsl(var(--border)) against rgba tokens
- blob url leak, orphaned media on failed save, devtools in prod bundle
- pt-safe/safe-area-pb classes never existed

spa features:
- offline outbox: entries queue to IndexedDB, replay with backoff, only
  server refusals count against an entry
- drafts persist, quick-log sheet, diary infinite scroll + filters
- route error boundary, stale-chunk recovery, no service worker in dev

a11y + perf:
- mood picker is a radiogroup, activity picker keyboard-operable,
  text alternatives for colour/emoji, locale week start
- dark glass over the bright photo: worst case 1.4:1 -> 4.9-9.6:1
- initial payload 1095->769kB raw, 306->230kB gzip; 38 unused components
  and 5 deps dropped; fonts 218->133kB

53 tests added (43 spa, 10 server)

crates/adapters/http-axum/src/openapi.rs

@@ -18,6 +18,7 @@ use utoipa::{Modify, OpenApi};
         crate::handlers::auth::handle_refresh,
         crate::handlers::auth::handle_logout,
         crate::handlers::entries::handle_create,
+        crate::handlers::entries::handle_create_many,
         crate::handlers::entries::handle_get,
         crate::handlers::entries::handle_list,
         crate::handlers::entries::handle_update,
@@ -47,6 +48,7 @@ use utoipa::{Modify, OpenApi};
         crate::handlers::reminders::handle_list,
         crate::handlers::reminders::handle_update,
         crate::handlers::reminders::handle_delete,
+        crate::handlers::media::handle_list,
         crate::handlers::media::handle_upload_photo,
         crate::handlers::media::handle_upload_voice_memo,
         crate::handlers::media::handle_serve_photo,
@@ -58,6 +60,7 @@ use utoipa::{Modify, OpenApi};
         crate::handlers::data::handle_restore,
         crate::handlers::import_export::handle_import,
         crate::handlers::push::handle_vapid_key,
+        crate::handlers::push::handle_list_subscriptions,
         crate::handlers::push::handle_subscribe,
         crate::handlers::push::handle_unsubscribe,
         crate::handlers::push::handle_test,
@@ -74,14 +77,19 @@ use utoipa::{Modify, OpenApi};
         crate::handlers::metrics::handle_import,
         crate::handlers::metrics::handle_rejections,
         crate::handlers::metrics::handle_set,
+        crate::handlers::server::handle_info,
+        crate::handlers::jobs::handle_list_exhausted,
     ),
     components(schemas(
         api_types::requests::CreateEntryRequest,
+        api_types::requests::CreateEntriesRequest,
+        api_types::responses::EntryPageResponse,
         api_types::requests::UpdateEntryRequest,
-        api_types::requests::ListEntriesParams,
-        api_types::requests::DateRangeParams,
+        api_types::params::ListEntriesParams,
+        api_types::params::DateRangeParams,
         api_types::requests::ReplaceActivityRequest,
         api_types::requests::CreateActivityRequest,
+        api_types::params::ListActivitiesParams,
         api_types::requests::RenameActivityRequest,
         api_types::requests::SetCategoryRequest,
         api_types::requests::RegisterRequest,
@@ -98,15 +106,18 @@ use utoipa::{Modify, OpenApi};
         api_types::responses::ReminderResponse,
         api_types::responses::DayScheduleResponse,
         api_types::responses::MoodStatsResponse,
-        api_types::responses::MoodFrequency,
+        api_types::responses::MoodFrequencyResponse,
         api_types::responses::CalendarDayResponse,
         api_types::responses::BulkActionResponse,
         api_types::responses::ImportResultResponse,
         api_types::responses::RestoreOutcomeResponse,
         api_types::responses::MediaIdResponse,
+        api_types::responses::OwnedMediaResponse,
+        api_types::responses::ExhaustedJobResponse,
+        api_types::responses::PushSubscriptionResponse,
         api_types::requests::SetDailyMetricsRequest,
         api_types::requests::MetricPayload,
-        api_types::requests::DateSpanParams,
+        api_types::params::DateSpanParams,
         api_types::responses::DailyMetricResponse,
         api_types::requests::MintApiTokenRequest,
         api_types::requests::SetPreferencesRequest,
@@ -127,6 +138,16 @@ use utoipa::{Modify, OpenApi};
         api_types::responses::StrategyScoreResponse,
         api_types::requests::PushSubscribeRequest,
         api_types::requests::PushUnsubscribeRequest,
+        api_types::responses::ErrorResponse,
+        api_types::responses::ErrorDetailResponse,
+        api_types::responses::SignedInResponse,
+        api_types::responses::RefreshedResponse,
+        api_types::responses::VapidKeyResponse,
+        api_types::responses::ServerInfoResponse,
+        api_types::responses::ServerLimitsResponse,
+        api_types::responses::TokenScopeResponse,
+        api_types::responses::MetricKindResponse,
+        api_types::responses::MoodResponse,
     )),
     tags(
         (name = "auth", description = "Authentication"),