v3.0.1: qualité & stabilité — tests, sécurité, UX consolidée

🧪 Tests: 73 → 130 (+57 tests)
- Upload API, labels sync, commit history (401/400/502/cached)
- File create/update (sha=null, sha=abc)
- Admin delete cascade (12 tests: oauth, tags, workspaces, pages…)
- Gitea status (linked/unlinked/disconnect)
- OAuth link mode (session, redirect, callback)

🔒 Sécurité
- ContentSecurityPolicyMiddleware (CSP headers)
- RateLimitMiddleware (100 req/min/IP)
- Pydantic models: ErrorResponse, SuccessResponse
- Input validation upload (10MB, allowed extensions)
- Pydantic request models

🎨 UX
- static/css/design-tokens.css (500 lines, thèmes + skeletons)
- Toast system: 16 alert() remplacés par toast()
- 59 lignes CSS dupliquées retirées (6 templates)
- Skeletons cohérents sur toutes les vues

⚡ Performance
- Cache TTL sur get_file_commits (consistant avec les autres méthodes)

app/templates/workspaces.html

@@ -31,8 +31,8 @@
 .ws-card:hover{background:var(--bg-tertiary);border-color:var(--border-strong);}
 .ws-card.active{border-color:var(--accent);box-shadow:0 0 0 1px var(--accent);}
 .ws-card-name{font-size:15px;font-weight:500;margin-bottom:2px;}
-.ws-card-sub{font-size:12px;color:var(--text-tertiary);margin-bottom:4px;}
-.ws-card-count{font-size:12px;color:var(--text-tertiary);}
+.ws-card-sub{font-size:12px;color:var(--text-dim);margin-bottom:4px;}
+.ws-card-count{font-size:12px;color:var(--text-dim);}
 .ws-card-actions{display:flex;gap:4px;margin-top:8px;opacity:0;transition:opacity 150ms;}
 .ws-card:hover .ws-card-actions{opacity:1;}
 
@@ -46,33 +46,12 @@
 .gitea-connect:hover{text-decoration:underline;}
 .gitea-loading{color:var(--text-dim);font-size:13px;padding:12px 0;}
 
-.dialog-overlay{position:fixed;inset:0;background:rgba(0,0,0,.6);display:flex;align-items:center;justify-content:center;z-index:500;}
-.dialog-box{background:#1F1F1F;border:1px solid var(--border);border-radius:18px;padding:24px;width:400px;max-width:90vw;}
-.dialog-box h3{margin-bottom:16px;}
-.dialog-input{width:100%;padding:10px 12px;background:var(--bg-tertiary);border:1px solid var(--border);border-radius:8px;color:var(--text);font-size:14px;margin-bottom:12px;outline:none;}
-.dialog-input:focus{border-color:var(--accent);}
-.dialog-actions{display:flex;gap:8px;justify-content:flex-end;}
-.btn{padding:8px 16px;border-radius:8px;font-size:13px;cursor:pointer;border:none;font-weight:500;}
-.btn-primary{background:var(--accent);color:#fff;}
-.btn-primary:hover{background:var(--accent-hover);}
-.btn-secondary{background:var(--bg-tertiary);color:var(--text);}
-.btn-secondary:hover{background:var(--bg-hover);}
-.btn-danger{background:rgba(255,80,80,.15);color:var(--danger);}
-.btn-danger:hover{background:rgba(255,80,80,.25);}
-.btn-new{border:1px dashed var(--border-strong);background:transparent;color:var(--text-secondary);display:flex;align-items:center;justify-content:center;min-height:120px;}
-.btn-new:hover{background:var(--bg-tertiary);color:var(--text);}
-.btn-sm{padding:4px 8px;font-size:11px;border-radius:6px;border:1px solid var(--border);background:transparent;color:var(--text-dim);cursor:pointer;}
-.btn-sm:hover{background:var(--bg-tertiary);color:var(--text);}
 /* Org tabs */
 .org-tab{display:inline-flex;align-items:center;gap:4px;padding:4px 10px;border-radius:6px;font-size:13px;color:var(--text-dim);background:transparent;border:1px solid var(--border);cursor:pointer;white-space:nowrap;transition:all 100ms;}
 .org-tab:hover{background:var(--bg-tertiary);color:var(--text);}
 .org-tab.active{background:var(--accent);color:#fff;border-color:var(--accent);}
 .org-tab-badge{font-size:10px;padding:0 5px;border-radius:8px;background:rgba(255,255,255,.15);}
 .search-input:focus{border-color:var(--accent);}
-
-/* ── Skeleton loading animation ── */
-.skeleton{background:var(--bg-tertiary);animation:pulse 1.5s ease-in-out infinite;border-radius:4px;}
-@keyframes pulse{0%,100%{opacity:1}50%{opacity:.5}}
 </style>
 
 <div class="ws-page" x-data="workspacesPage()">