feat: version 3.0.0 -- Correcciones de auditoria de seguridad, accesibilidad y redundancia

Permisos (superadmin, viewer, busqueda, tareas recurrentes), bootstrap atomico,
revocacion de JWT por version de sesion (028), control optimista de edicion (029),
logo sin SVG + CSP, ingesta endurecida, correos escapados, borradores, paginacion
de proyectos, accesibilidad de dialogos/controles e i18n.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

frontend/src/components/ContentDialog.jsx

@@ -1,6 +1,8 @@
 import { createPortal } from 'react-dom';
 import { useUi } from '../context/ui-context.jsx';
 import { Button } from './Button.jsx';
+import { useId } from 'react';
+import { useModalFocus } from '../hooks/useModalFocus.js';
 
 const STRIPE_COLOR = { info: 'accent', success: 'success', warning: 'warning', error: 'danger' };
 
@@ -8,6 +10,8 @@ const STRIPE_COLOR = { info: 'accent', success: 'success', warning: 'warning', e
 // openDialog({ tone, title, message, actions: [{ label, variant, keepOpen, onClick }] })
 export function ContentDialogHost() {
   const { dialog, closeDialog, t } = useUi();
+  const titleId = useId();
+  const modalRef = useModalFocus(!!dialog);
   if (!dialog) return null;
 
   const tone = dialog.tone || 'info';
@@ -23,10 +27,10 @@ export function ContentDialogHost() {
   // encima de cualquier DetailPopup abierto, sin depender del punto del arbol donde se monta.
   return createPortal(
     <div className="dialog-overlay">
-      <div className="dialog-surface">
+      <div className="dialog-surface" role="dialog" aria-modal="true" aria-labelledby={titleId} tabIndex={-1} ref={modalRef}>
         <div className="dialog-stripe" style={{ background: `rgb(var(--${STRIPE_COLOR[tone]}))` }} />
         <div className="dialog-body">
-          <div className="dialog-title">{dialog.title}</div>
+          <div className="dialog-title" id={titleId}>{dialog.title}</div>
           <div className="dialog-message">{dialog.message}</div>
         </div>
         <div className="dialog-actions">