Confirm-gate lifecycle actions, cluster the action strip (#11)

Fixes the 2026-07-30 impeccable critique of the web UI.

Archive and finish now open their own .confirm-row disclosure, the
pattern delete already used, so no single tap moves a series out of the
list. Restore stays instant — it is the reversal. The two reversible
confirms wear grey; remove keeps the ember wash.

The six action cells cluster by consequence: navigate (play) | organize
(favourite, chapter) | lifecycle (archive/restore, finish, remove). The
lifecycle cells sit on a recessed ground, separated by a hairline on a
phone and by a gap on desktop, so the 4th-slot icon swapping between
.box and .restore no longer breaks position memory.

htmx:responseError branches on status: 401 offers a login link, 400
surfaces the server's own reason, everything else keeps the retry copy.

Busy bar and inline error move to --mute, leaving --ember exclusive to
the new-chapter signal.

Also: aria-live on the confirm rows, max on the chapter input, cover
width and row gap as tokens instead of a hardcoded 94px indent, and
mobile covers 30% larger.

Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>

CLAUDE.md

@@ -38,6 +38,21 @@ Bromite userscript (isolated world, per-site adapters, localStorage cache)
   the web routes are not registered at all. UI mutations read-modify-write
   through `Store.Get` + `Store.Upsert` so the `updated_at` rule stays in one
   place. See `docs/superpowers/specs/2026-07-25-web-ui-design.md`.
+  **Design-tool caveat:** the templates link `/static/style.css` root-absolutely
+  (correct — they are served from `/`), but the impeccable detector resolves a
+  stylesheet href with `path.resolve(fileDir, href)`, which drops the directory
+  on a leading `/` and silently skips the file. A relative href does not help
+  either: the template's directory is not its served path. So
+  `detect.mjs backend/templates` reports a **false clean** — always pass
+  `backend/static` too. Its one finding there, `overused-font` on "Instrument
+  Serif", is a deliberate identity choice, not debt.
+- **Every action that moves a series out of the list is confirm-gated.**
+  Archive, finish, and remove each open their own `.confirm-row` disclosure
+  (`toggleConfirmRow(key, kind)` in `filter.js`, `kind` ∈
+  `archive|finish|remove`); restore fires instantly because it is the reversal.
+  Remove's row wears the ember wash, the two reversible ones wear `.calm` grey.
+  `--ember` stays reserved for the new-chapter signal: busy bar and inline
+  error use `--mute`.
 - **Latest-chapter poller:** a ticker goroutine in the same binary re-checks
   each bookmarked series' newest published chapter from the backend's own
   network access, so `latest_chapter` stays fresh when the user is not