spa hardening, offline logging, rate limit fixes

server:
- backup exporter, auth extractors, error shapes, CONTEXT (prior work)
- spa assets served outside the rate limit via route_layer
- requests_per_second went to per_second(), which takes an interval not a
  rate: 50 meant one request per 50s once burst was spent. now converted
  properly. 15/s, burst 60

spa fixes:
- account delete cleared snake_case token keys that were never written
- refresh interceptor could retry forever
- date ranges used local day boundaries stamped +00:00
- "all" period trend plotted one page; calendar days fabricated mood 3
- chart grid invisible: hsl(var(--border)) against rgba tokens
- blob url leak, orphaned media on failed save, devtools in prod bundle
- pt-safe/safe-area-pb classes never existed

spa features:
- offline outbox: entries queue to IndexedDB, replay with backoff, only
  server refusals count against an entry
- drafts persist, quick-log sheet, diary infinite scroll + filters
- route error boundary, stale-chunk recovery, no service worker in dev

a11y + perf:
- mood picker is a radiogroup, activity picker keyboard-operable,
  text alternatives for colour/emoji, locale week start
- dark glass over the bright photo: worst case 1.4:1 -> 4.9-9.6:1
- initial payload 1095->769kB raw, 306->230kB gzip; 38 unused components
  and 5 deps dropped; fonts 218->133kB

53 tests added (43 spa, 10 server)

crates/application/tests/entry/replace_activity_test.rs

@@ -2,7 +2,7 @@ use std::sync::Arc;
 
 use domain::activity::ActivityId;
 use domain::entry::Mood;
-use domain::ports::{ActivityCommandPort, MoodEntryCommandPort, MoodEntryQueryPort};
+use domain::ports::{ActivityCommandPort, MoodEntryCommandPort};
 use domain::testing::{InMemoryStore, test_activity, test_entry, test_user};
 
 use application::entry::use_cases::replace_activity;
@@ -29,8 +29,8 @@ async fn replaces_activity_on_entries() {
         .await
         .unwrap();
 
-    let now_tagged_new = store.find_by_activity(user.id(), new.id()).await.unwrap();
-    let still_tagged_old = store.find_by_activity(user.id(), old.id()).await.unwrap();
+    let now_tagged_new = tagged_with(&store, &user, new.id()).await;
+    let still_tagged_old = tagged_with(&store, &user, old.id()).await;
 
     assert_eq!(now_tagged_new.len(), 1);
     assert!(still_tagged_old.is_empty());
@@ -80,3 +80,17 @@ async fn rejects_target_owned_by_different_user() {
     .await;
     assert!(result.is_err());
 }
+
+async fn tagged_with(
+    store: &Arc<InMemoryStore>,
+    user: &domain::user::User,
+    activity_id: &domain::activity::ActivityId,
+) -> Vec<domain::entry::MoodEntry> {
+    let selection = domain::entry::EntrySelection::everything_of(user.id().clone())
+        .tagged_with(Some(activity_id.clone()));
+    let page = domain::entry::Pagination::new(500, 0, 500).unwrap();
+
+    domain::ports::MoodEntryQueryPort::select(store.as_ref(), &selection, page)
+        .await
+        .unwrap()
+}