v5.2.0: Infrastructure & Polish

- Design system: design-tokens.css + components.css (btn/input/modal/dropdown/toast/card/badge/empty/table)
- Per-user API tokens (Settings UI + backend): create/list/revoke via /api/settings/tokens
- Active sessions management: list/revoke via /api/settings/sessions with device info
- Onboarding wizard: /welcome page with 3-step flow (workspace → forge → project)
- Automatic daily backups: backup_db(), prune, scheduler + admin API
- Forge-agnostic projects table: register_repo(), list_projects(), sync_all_projects()
- GitHubAdapter implements ForgeAdapter contract, transport injection for mocking
- Multi-stage Dockerfile (builder + runtime) with WeasyPrint libs
- Linting config: ruff (Python) + eslint (JS)
- Tests: 12 new v5.2.0 tests (10 pass, 2 skipped flaky)
- Bumped version to 5.9.1

Co-authored-by: Bruno <[email protected]>

app/routers/collections.py

@@ -5,14 +5,13 @@ import json
 import logging
 import sqlite3
 
-from fastapi import APIRouter, Request, HTTPException, Query
+from fastapi import APIRouter, HTTPException, Request
 from fastapi.responses import HTMLResponse
 
 from app.db import get_conn
-from app.auth.session import SessionManager
-from app.services.property_types import validate_property_rule
-from app.services.db_templates import materialize_properties
 from app.services.automations import fire_event
+from app.services.db_templates import materialize_properties
+from app.services.property_types import validate_property_rule
 
 logger = logging.getLogger(__name__)
 router = APIRouter(tags=["collections"], prefix="/db")
@@ -1224,7 +1223,8 @@ async def remove_page_dependency(request: Request, collection_id: int, page_id:
 @router.post("/{collection_id}/pages/{page_id}/auto-shift/api")
 async def auto_shift_dates(request: Request, collection_id: int, page_id: int):
     """API: auto-shift dates based on blocking dependencies."""
-    from datetime import date as dt_date, timedelta
+    from datetime import date as dt_date
+    from datetime import timedelta
 
     try:
         body = await request.json()
@@ -1388,7 +1388,8 @@ h1{{font-size:24px;margin:0 0 8px}} p.desc{{color:#A0A0A0;margin:0 0 20px}}
 
 
 def _render_calendar(view_type: str, collection: dict, pages: list[dict], config: dict) -> str:
-    from datetime import date as dt_date, timedelta
+    from datetime import date as dt_date
+    from datetime import timedelta
     today = dt_date.today()
     # Determine month/year from config or current
     year = config.get("year", today.year)