feat: version 3.0.0 -- Correcciones de auditoria de seguridad, accesibilidad y redundancia

Permisos (superadmin, viewer, busqueda, tareas recurrentes), bootstrap atomico,
revocacion de JWT por version de sesion (028), control optimista de edicion (029),
logo sin SVG + CSP, ingesta endurecida, correos escapados, borradores, paginacion
de proyectos, accesibilidad de dialogos/controles e i18n.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

backend/src/modules/projects/routes.js

@@ -1,7 +1,7 @@
 import { Router } from 'express';
 import { requireAuth } from '../../middleware/auth.js';
 import {
-  getProjects, getProject, postProject, putProject, deleteProject, postProjectRestore,
+  getProjects, getProjectOptions, getProject, postProject, putProject, deleteProject, postProjectRestore,
   deleteProjectPermanent, postMember, putMemberRole, deleteMember,
 } from './controller.js';
 import { getGantt } from '../dashboard/controller.js';
@@ -11,6 +11,7 @@ const router = Router();
 
 router.use(requireAuth);
 router.get('/', getProjects);
+router.get('/options', getProjectOptions);
 router.post('/', postProject);
 router.get('/:id', getProject);
 router.put('/:id', putProject);