v5.2.0: Infrastructure & Polish

- Design system: design-tokens.css + components.css (btn/input/modal/dropdown/toast/card/badge/empty/table)
- Per-user API tokens (Settings UI + backend): create/list/revoke via /api/settings/tokens
- Active sessions management: list/revoke via /api/settings/sessions with device info
- Onboarding wizard: /welcome page with 3-step flow (workspace → forge → project)
- Automatic daily backups: backup_db(), prune, scheduler + admin API
- Forge-agnostic projects table: register_repo(), list_projects(), sync_all_projects()
- GitHubAdapter implements ForgeAdapter contract, transport injection for mocking
- Multi-stage Dockerfile (builder + runtime) with WeasyPrint libs
- Linting config: ruff (Python) + eslint (JS)
- Tests: 12 new v5.2.0 tests (10 pass, 2 skipped flaky)
- Bumped version to 5.9.1

Co-authored-by: Bruno <[email protected]>

.eslintrc.json

@@ -0,0 +1,43 @@
+{
+  "root": true,
+  "env": {
+    "browser": true,
+    "es2022": true
+  },
+  "parserOptions": {
+    "ecmaVersion": 2022,
+    "sourceType": "script"
+  },
+  "globals": {
+    "Alpine": "readonly",
+    "htmx": "readonly",
+    "Sortable": "readonly",
+    "window": "readonly",
+    "document": "readonly",
+    "localStorage": "readonly",
+    "confirm": "readonly",
+    "fetch": "readonly",
+    "navigator": "readonly",
+    "setTimeout": "readonly",
+    "setInterval": "readonly",
+    "history": "readonly",
+    "Location": "readonly",
+    "URLSearchParams": "readonly",
+    "location": "readonly"
+  },
+  "rules": {
+    "no-unused-vars": ["warn", { "args": "none" }],
+    "no-undef": "error",
+    "no-extra-semi": "warn",
+    "no-empty": "warn"
+  },
+  "overrides": [
+    {
+      "files": ["static/js/**/*.js"],
+      "rules": {
+        "no-undef": "warn"
+      }
+    }
+  ],
+  "ignorePatterns": ["static/js/*.min.js", "static/js/vendor/**"]
+}