spa hardening, offline logging, rate limit fixes

server:
- backup exporter, auth extractors, error shapes, CONTEXT (prior work)
- spa assets served outside the rate limit via route_layer
- requests_per_second went to per_second(), which takes an interval not a
  rate: 50 meant one request per 50s once burst was spent. now converted
  properly. 15/s, burst 60

spa fixes:
- account delete cleared snake_case token keys that were never written
- refresh interceptor could retry forever
- date ranges used local day boundaries stamped +00:00
- "all" period trend plotted one page; calendar days fabricated mood 3
- chart grid invisible: hsl(var(--border)) against rgba tokens
- blob url leak, orphaned media on failed save, devtools in prod bundle
- pt-safe/safe-area-pb classes never existed

spa features:
- offline outbox: entries queue to IndexedDB, replay with backoff, only
  server refusals count against an entry
- drafts persist, quick-log sheet, diary infinite scroll + filters
- route error boundary, stale-chunk recovery, no service worker in dev

a11y + perf:
- mood picker is a radiogroup, activity picker keyboard-operable,
  text alternatives for colour/emoji, locale week start
- dark glass over the bright photo: worst case 1.4:1 -> 4.9-9.6:1
- initial payload 1095->769kB raw, 306->230kB gzip; 38 unused components
  and 5 deps dropped; fonts 218->133kB

53 tests added (43 spa, 10 server)

crates/bootstrap/src/factory.rs

@@ -48,12 +48,17 @@ pub async fn build(config: AppConfig) -> Result<Context, Box<dyn std::error::Err
     let weather_store = Arc::new(sqlite::repositories::SqliteWeatherDimensionRepository::new(
         pool.clone(),
     ));
+    let activity_store =
+        Arc::new(sqlite::repositories::SqliteRelationDimensionRepository::activities(pool.clone()));
+    let media_ownership = Arc::new(sqlite::repositories::SqliteMediaOwnershipRepository::new(
+        pool.clone(),
+    ));
 
     let dimensions: Vec<Arc<dyn domain::ports::EntryDimensionPort>> = vec![
         Arc::new(sqlite::repositories::SqliteContentDimensionRepository::new(
             pool.clone(),
         )),
-        Arc::new(sqlite::repositories::SqliteRelationDimensionRepository::activities(pool.clone())),
+        activity_store.clone(),
         Arc::new(sqlite::repositories::SqliteRelationDimensionRepository::photos(pool.clone())),
         Arc::new(
             sqlite::repositories::SqliteRelationDimensionRepository::voice_memos(pool.clone()),
@@ -178,10 +183,12 @@ pub async fn build(config: AppConfig) -> Result<Context, Box<dyn std::error::Err
         entry_query,
         dimensions,
         weather_store: weather_store.clone(),
+        activity_store: activity_store.clone(),
         provider_connection_command,
         provider_connection_query,
         credential_cipher,
         now_playing,
+        weather_enabled: weather_lookup.is_some(),
         recording_lookup: recording_lookup.clone(),
         activity_command,
         activity_query,
@@ -207,6 +214,8 @@ pub async fn build(config: AppConfig) -> Result<Context, Box<dyn std::error::Err
         password_hasher: Arc::new(password_hasher),
         event_publisher: Arc::new(event_publisher),
         media_storage: Arc::new(media_storage),
+        media_ownership,
+        job_view: job_queue.clone(),
         backup_writer: Arc::new(exporter::ZipBackupWriter),
         backup_reader: Arc::new(importer::KmoodBackupAdapter),
         extract_writer: Arc::new(exporter::MarkdownExtractWriter),