spa hardening, offline logging, rate limit fixes

server:
- backup exporter, auth extractors, error shapes, CONTEXT (prior work)
- spa assets served outside the rate limit via route_layer
- requests_per_second went to per_second(), which takes an interval not a
  rate: 50 meant one request per 50s once burst was spent. now converted
  properly. 15/s, burst 60

spa fixes:
- account delete cleared snake_case token keys that were never written
- refresh interceptor could retry forever
- date ranges used local day boundaries stamped +00:00
- "all" period trend plotted one page; calendar days fabricated mood 3
- chart grid invisible: hsl(var(--border)) against rgba tokens
- blob url leak, orphaned media on failed save, devtools in prod bundle
- pt-safe/safe-area-pb classes never existed

spa features:
- offline outbox: entries queue to IndexedDB, replay with backoff, only
  server refusals count against an entry
- drafts persist, quick-log sheet, diary infinite scroll + filters
- route error boundary, stale-chunk recovery, no service worker in dev

a11y + perf:
- mood picker is a radiogroup, activity picker keyboard-operable,
  text alternatives for colour/emoji, locale week start
- dark glass over the bright photo: worst case 1.4:1 -> 4.9-9.6:1
- initial payload 1095->769kB raw, 306->230kB gzip; 38 unused components
  and 5 deps dropped; fonts 218->133kB

53 tests added (43 spa, 10 server)

crates/application/src/job/use_cases/run_due_jobs.rs

@@ -95,13 +95,13 @@ async fn observe_weather(job: &Job, deps: &Deps) -> Result<(), String> {
         return Err("weather lookups are switched off".into());
     };
 
-    let waiting = deps
+    let found = deps
         .places
-        .find_places_without_weather(usize::MAX)
+        .find_place_without_weather(entry_id)
         .await
         .map_err(|error| error.to_string())?;
 
-    let Some(place) = waiting.iter().find(|place| &place.entry_id == entry_id) else {
+    let Some(place) = found else {
         return Ok(());
     };
 
@@ -116,7 +116,7 @@ async fn observe_weather(job: &Job, deps: &Deps) -> Result<(), String> {
         return Ok(());
     };
 
-    remember_weather(place, weather, deps).await
+    remember_weather(&place, weather, deps).await
 }
 
 async fn remember_weather(
@@ -133,13 +133,13 @@ async fn remember_weather(
 async fn backfill_recording_identity(job: &Job, deps: &Deps) -> Result<(), String> {
     let JobSubject::Entry(entry_id) = job.subject();
 
-    let waiting = deps
+    let found = deps
         .backfill
-        .find_songs_without_a_recording(usize::MAX)
+        .find_song_without_a_recording(entry_id)
         .await
         .map_err(|error| error.to_string())?;
 
-    let Some(song) = waiting.iter().find(|song| &song.entry_id == entry_id) else {
+    let Some(song) = found else {
         return Ok(());
     };
 
@@ -155,7 +155,7 @@ async fn backfill_recording_identity(job: &Job, deps: &Deps) -> Result<(), Strin
         return Ok(());
     };
 
-    remember(song, &recording_id, deps).await
+    remember(&song, &recording_id, deps).await
 }
 
 async fn remember(