fix: servir JS/CSS en local — plus de dépendance CDN externe

Téléchargés et servis depuis /static/js/:
- alpine.min.js (44 KB) — remplace unpkg.com
- htmx.min.js (51 KB) — remplace unpkg.com
- sortable.min.js (45 KB) — remplace cdn.jsdelivr.net
- prism.min.js (19 KB) + prism.css (1.3 KB) — remplace cdnjs

Corrige le bug 'rien ne fonctionne' quand le réseau est lent/absent:
sans CDN, Alpine.js/HTMX/SortableJS ne chargeaient pas →
tous les @click, x-show, x-data, drag-drop inopérants.

app/templates/base.html

@@ -7,9 +7,9 @@
   <link rel="icon" type="image/svg+xml" href="/static/favicon.svg">
   <link rel="stylesheet" href="/static/css/design-tokens.css?v=1.0">
   <link rel="stylesheet" href="/static/css/app.css?v=2.4.6">
-  <script src="https://unpkg.com/[email protected]"></script>
-  <script src="https://unpkg.com/[email protected]" defer></script>
-  <script src="https://cdn.jsdelivr.net/npm/[email protected]/Sortable.min.js" defer></script>
+  <script src="/static/js/htmx.min.js"></script>
+  <script src="/static/js/alpine.min.js" defer></script>
+  <script src="/static/js/sortable.min.js" defer></script>
 </head>
 <body hx-headers='{"X-CSRF-Token":"__CSRF_PLACEHOLDER__"}'>
 <div class="app-layout" x-data="appState()">

app/templates/gitea_workspace.html

@@ -23,9 +23,8 @@
 
 {% block content %}
 <!-- Prism.js syntax highlighting -->
-<link rel="stylesheet" href="https://cdn.jsdelivr.net/npm/[email protected]/themes/prism-tomorrow.min.css">
-<script src="https://cdn.jsdelivr.net/npm/[email protected]/prism.min.js"></script>
-<script src="https://cdn.jsdelivr.net/npm/[email protected]/plugins/autoloader/prism-autoloader.min.js"></script>
+<link rel="stylesheet" href="/static/css/prism.css">
+<script src="/static/js/prism.min.js"></script>
 <style>
 .gw-main{display:flex;flex-direction:column;height:calc(100vh - 48px);overflow:hidden;}
 .gw-content{padding:24px;overflow-y:auto;flex:1;}