fix(freshness): converge invalidation sets; global query-error toast; silent-toggle feedback

- OrderDetail/InvoiceDetail/LeaveRequests mutations now invalidate the same
  domain sets as their list-page twins (orders+offers+projects+invoices /
  +projects / +users+dashboard) — no more stale project/order labels after
  a detail-page action.
- USER_INVALIDATE hoisted to lib/queries/users.ts; DashProfile self-edit now
  refreshes trips/attendance/leave/projects like an admin edit.
- Global QueryCache.onError toast: failed first-loads no longer masquerade as
  empty lists (data-present refetches stay silent; Unauthorized skipped; 4s
  rate limit; meta.suppressGlobalErrorToast opt-out used by offer/issued-order
  detail + the local TOTP QR query).
- Users/Vehicles active-toggle mutations toast on error (was silent revert);
  clickable status chips got affordance tooltips (incl. warehouse parity).
- AuditLog: refetchOnMount always + staleTime 0 (mutations write audit rows
  but nothing invalidates the key); search debounced; dead auditLogOptions
  module removed.

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>

src/admin/pages/Users.tsx

@@ -7,10 +7,11 @@ import IconButton from "@mui/material/IconButton";
 import { useAuth } from "../context/AuthContext";
 import { useAlert } from "../context/AlertContext";
 import Forbidden from "../components/Forbidden";
-import { useApiMutation } from "../lib/queries/mutations";
+import { useApiMutation, apiErrorMessage } from "../lib/queries/mutations";
 import {
   userListOptions,
   roleListOptions,
+  USER_INVALIDATE,
   type User,
 } from "../lib/queries/users";
 import {
@@ -114,15 +115,6 @@ export default function Users() {
     is_active: true,
   });
 
-  const USER_INVALIDATE = [
-    "users",
-    "trips",
-    "attendance",
-    "leave-requests",
-    "leave",
-    "projects",
-  ];
-
   const saveUser = useApiMutation<UserPayload, void>({
     url: () =>
       editingUser ? `${API_BASE}/users/${editingUser.id}` : `${API_BASE}/users`,
@@ -168,6 +160,9 @@ export default function Users() {
         input.is_active ? "Uživatel byl aktivován" : "Uživatel byl deaktivován",
       );
     },
+    onError: (err) => {
+      alert.error(apiErrorMessage(err, "Nepodařilo se změnit stav uživatele"));
+    },
   });
 
   if (!hasPermission("users.view")) return <Forbidden />;
@@ -290,6 +285,9 @@ export default function Users() {
           label={u.is_active ? "Aktivní" : "Neaktivní"}
           color={u.is_active ? "success" : "default"}
           onClick={u.id === currentUser?.id ? undefined : () => toggleActive(u)}
+          title={
+            u.id === currentUser?.id ? undefined : "Kliknutím přepnete stav"
+          }
         />
       ),
     },