phase-6: the staff console, and a log that says who did what

Flow H, three screens behind a role check: find an account, work the
ingestion error queue, read and export the audit log. Superadmins can
change a role, never their own.

The error queue merges ingest errors and dead jobs into one table with a
cursor that pages both sources; only a job can be retried and only an
ingest row resolved, with a note that migration 003 gives it somewhere
to live.

writeAudit no longer defaults a missing subject to the actor, which had
been recording a user search as staff looking themselves up. Omitting
the subject still means acting on yourself; null now means the action
has no subject, which is what a search, a retry and an export are.

Reading the log is not audited. Exporting it is: a copy leaving the
building is a different act from looking.

e2e/global-setup.ts asks for every screen once before the suite starts,
so a dev server's first-request compile is paid before the first test
rather than by it.

Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>

e2e/declarations.spec.ts

@@ -61,7 +61,9 @@ test.describe('golden path 4: review, approve, download, file', () => {
     // The official layout, in Spanish, marked as a draft until it is approved.
     await expect(page.getByRole('heading', { name: es['decl.preview.title'] })).toBeVisible();
     await expect(page.getByText(es['decl.preview.spanishNote'])).toBeVisible();
-    await expect(page.getByText('Debito fiscal')).toBeVisible();
+    // The cell, not any text: the summary above it names the debito too, and this line is
+    // about the form laying out its casillas.
+    await expect(page.getByRole('cell', { name: 'Debito fiscal', exact: true })).toBeVisible();
     await expect(page.getByText(es['decl.preview.draftMark'])).toBeVisible();
 
     // D3: approving asks once, restating the number.