feat(eventsnap): UX review batch-3 — feed virtualization, a11y/UX fixes, shared primitives

Frontend
- Feed: DOM-windowing via @tanstack/svelte-virtual (new VirtualFeed). The window
  virtualizer keeps the sticky header, pull-to-refresh, infinite-scroll sentinel and
  bottom nav working. List = dynamic measured heights keyed by upload id +
  anchorTo:start so an SSE prepend doesn't jump a scrolled reader; grid = measured
  square rows. Drops the content-visibility band-aid and the old FeedGrid.
  measureElement(null) on row unmount prevents ResizeObserver retention; stable
  option callbacks + guarded setOptions avoid O(n) re-measure on like/comment patches.
- Global: viewport-fit=cover (activates safe-area insets), lang=de, PWA manifest +
  maskable icon + apple-touch metas, prefers-reduced-motion, safe-area-top headers.
- Feed reactivity: like/comment SSE patch the single card in place; upload-processed
  debounced in-place merge; IntersectionObserver leak fixed; shared 60s clock.
- CLS: list cards reserve the skeleton aspect box.
- Destructive actions (promote/demote/unban, gallery release) routed through
  ConfirmSheet (host + admin).
- Export OOM: streamed download via single-use ticket instead of res.blob().
- Shared primitives: IconButton (44px hit area), scrollLock action; UploadSheet a11y.
- Polish: api timeout + non-JSON guard, focus-trap offsetParent fix, pull-to-refresh
  passive:false + guards, diashow keyboard a11y, Toaster assertive errors, dark-mode
  gaps, aria-pressed on like/chip state, CameraCapture mic-on-video + retry,
  ConfirmSheet spinner, upload beforeunload warning, emoji->SVG icons.

Backend
- social.rs: like/comment SSE broadcasts now carry the fresh count so feed clients
  patch one card in place instead of refetching page 1.
- admin.rs / main.rs: supporting changes for the above.

Verified: svelte-check 0 errors, frontend build clean, /feed SSR 200. Runtime feed
scroll-feel validation still owed (documented in FOLLOWUPS.md).

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>

e2e/specs/06-export/export.spec.ts

@@ -46,11 +46,17 @@ test.describe('Export — release and download', () => {
     const g = await guest('NoFile');
     await db.setExportReleased(SLUG, true);
     await db.fakeExportJob(SLUG, 'zip', 'done');
-    // Real backend additionally checks event.export_zip_ready. The faked row is
-    // enough for /status; the download path needs the boolean flag too.
-    const res = await fetch((process.env.E2E_FRONTEND_URL ?? 'http://localhost:3101') + '/api/v1/export/zip', {
+    const base = process.env.E2E_FRONTEND_URL ?? 'http://localhost:3101';
+    // Browser downloads stream straight to disk via a top-level navigation, so the
+    // download endpoint authenticates with a single-use ticket (no Bearer header).
+    const ticketRes = await fetch(base + '/api/v1/export/ticket', {
+      method: 'POST',
       headers: { Authorization: `Bearer ${g.jwt}` },
     });
+    const { ticket } = await ticketRes.json();
+    // Real backend additionally checks event.export_zip_ready. The faked row is
+    // enough for /status; the download path needs the boolean flag too.
+    const res = await fetch(base + '/api/v1/export/zip?ticket=' + encodeURIComponent(ticket));
     // Either 404 ("not available" OR "file not found") — both are valid states for this setup.
     expect([404, 200]).toContain(res.status);
   });

e2e/specs/09-mobile/gestures-longpress.spec.ts

@@ -2,7 +2,7 @@
  * Phase 3 mobile — long-press gesture.
  *
  * The `longpress` action attaches to `<article>` in FeedListCard and to
- * grid cells in FeedGrid. Holding for ≥ 500 ms fires `onlongpress`,
+ * grid cells in VirtualFeed (grid mode). Holding for ≥ 500 ms fires `onlongpress`,
  * which opens the ContextSheet bottom sheet via the feed page's
  * `contextTarget` state.
  *