fix: 2026-06-09 full-codebase audit hardening

Validation: shared NaN-guarded Zod coercion helpers in schemas/common.ts replace
the raw number|string transform idiom across every schema (the root-cause NaN bug
class); emailOrEmpty + lenient isoDateString/timeString.

Security: roles privilege-escalation closed; refresh-token family revocation on
reuse; TOTP uses config params; read endpoints permission-guarded; received-invoices
gross VAT on all paths; orders-pdf custom-items authz.

Concurrency: $queryRaw SELECT...FOR UPDATE locks in ascending-id order (warehouse
confirm/cancel, attendance lockUserRow); uniqueness checks moved into create
transactions (TOCTOU -> 409); deterministic id tiebreak on second-precision
timestamp ordering (plan resolveCell/resolveGrid, warehouse FIFO).

Frontend: Rules-of-Hooks fixed across ~14 pages + PlanCellModal; UTC-date persisted
fields; dashboard invalidation gaps; stale-closure confirm bugs.

Tooling/tests: ESLint flat config (react-hooks/rules-of-hooks = error) + Prettier;
tsconfig.test.json so tsc -b type-checks the tests; removed 3 dead deps; npm audit
fix (8 -> 3). Suite 195 -> 247 (happy-path auth, FIFO oldest-first, flakiness fixes),
isolated on app_test via .env.test with a hard-throw setup guard.

Gates: tsc 0 | build 0 | vitest 247/247 | eslint 0 errors.

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

src/admin/ui/Card.tsx

@@ -1,10 +1,30 @@
 import MuiCard, { type CardProps } from "@mui/material/Card";
-import CardContent from "@mui/material/CardContent";
+import CardContent, { type CardContentProps } from "@mui/material/CardContent";
 
-export default function Card({ children, ...props }: CardProps) {
+export interface AppCardProps extends CardProps {
+  /**
+   * Skip the default CardContent wrapper so children sit edge-to-edge (e.g. for
+   * media, tables, or a custom layout). Defaults to false — the standard padded
+   * content behavior is unchanged for existing call sites.
+   */
+  disableContentPadding?: boolean;
+  /** Props forwarded to the inner CardContent (ignored when disableContentPadding). */
+  contentProps?: CardContentProps;
+}
+
+export default function Card({
+  children,
+  disableContentPadding = false,
+  contentProps,
+  ...props
+}: AppCardProps) {
   return (
     <MuiCard {...props}>
-      <CardContent>{children}</CardContent>
+      {disableContentPadding ? (
+        children
+      ) : (
+        <CardContent {...contentProps}>{children}</CardContent>
+      )}
     </MuiCard>
   );
 }