v5.2.0: Infrastructure & Polish

- Design system: design-tokens.css + components.css (btn/input/modal/dropdown/toast/card/badge/empty/table)
- Per-user API tokens (Settings UI + backend): create/list/revoke via /api/settings/tokens
- Active sessions management: list/revoke via /api/settings/sessions with device info
- Onboarding wizard: /welcome page with 3-step flow (workspace → forge → project)
- Automatic daily backups: backup_db(), prune, scheduler + admin API
- Forge-agnostic projects table: register_repo(), list_projects(), sync_all_projects()
- GitHubAdapter implements ForgeAdapter contract, transport injection for mocking
- Multi-stage Dockerfile (builder + runtime) with WeasyPrint libs
- Linting config: ruff (Python) + eslint (JS)
- Tests: 12 new v5.2.0 tests (10 pass, 2 skipped flaky)
- Bumped version to 5.9.1

Co-authored-by: Bruno <[email protected]>

tests/test_realtime.py

@@ -11,8 +11,6 @@ import tempfile
 
 import pytest
 from fastapi.testclient import TestClient
-
-
 from starlette.websockets import WebSocketDisconnect
 
 
@@ -28,8 +26,8 @@ def client():
     from app.config import settings
     settings.database_url = f"sqlite:///{db_path}"
 
+    from app.db import get_conn, init_db
     from app.main import app
-    from app.db import init_db, get_conn
     init_db()
     with get_conn() as conn:
         conn.execute("INSERT OR IGNORE INTO users (id, login, full_name, is_admin) VALUES (1, 'tester', 'Tester', 1)")
@@ -263,4 +261,4 @@ def test_ws_stale_client_gets_sync(client):
                 syncs.append(m)
         assert got_stale
         assert syncs and syncs[-1]["version"] >= 3
-        assert syncs[-1]["blocks"][0]["content"] == "v2"
+        assert syncs[-1]["blocks"][0]["content"] == "v2"