feat: version 3.0.0 -- Correcciones de auditoria de seguridad, accesibilidad y redundancia

Permisos (superadmin, viewer, busqueda, tareas recurrentes), bootstrap atomico,
revocacion de JWT por version de sesion (028), control optimista de edicion (029),
logo sin SVG + CSP, ingesta endurecida, correos escapados, borradores, paginacion
de proyectos, accesibilidad de dialogos/controles e i18n.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

backend/src/modules/activities/service.js

@@ -5,6 +5,7 @@ import * as attachmentsRepo from '../attachments/repository.js';
 import * as tasksRepo from '../tasks/repository.js';
 import { recalcProjectProgress, canReadProject, canWriteProject } from '../projects/service.js';
 import { HttpError } from '../../utils/http.js';
+import { requireEditVersion, requireUpdated } from '../../utils/editVersion.js';
 import { logAudit } from '../../utils/audit.js';
 import { ROLES } from '../../middleware/auth.js';
 import { createNotification } from '../notifications/service.js';
@@ -84,8 +85,9 @@ export async function updateActivity(id, payload, currentUser) {
     ? activity.responsible_user_id
     : (payload.responsibleUserId ?? activity.responsible_user_id);
 
+  requireEditVersion(payload.editVersion);
   const taskCount = await repo.countTasks(id);
-  const updated = await repo.update(id, { ...payload, responsibleUserId: nextResponsible });
+  const updated = requireUpdated(await repo.update(id, { ...payload, responsibleUserId: nextResponsible }));
 
   if (taskCount === 0 && payload.progressPct !== undefined) {
     const pct = Math.max(0, Math.min(100, Number(payload.progressPct)));