feat: multiple improvements to library functionality (#50)

## Summary

This PR implements several improvements to the library application:

- Added start and finish date tracking for media items
- Added "Retired" category for abandoned media
- Implemented avatar-based user menu with dropdown navigation
- Added automatic background token refresh to prevent session expiry
- Created centralised logging system with frontend-to-API log forwarding
- Added toast notifications for error handling

## Changes

### Media Tracking (#41)
- Added `dateStarted` and `dateFinished` fields to Books, Games, Manga, Music, and Shows
- Updated TypeScript types, Prisma schema, and API services
- Added manual date input fields to frontend forms
- Properly converts HTML date strings to Date objects before API submission

### Retired Category (#43)
- Added `RETIRED` status to all media type enums
- Updated Prisma schema, frontend dropdowns, and filter buttons
- Added status label handling for retired items

### User Menu (#46)
- Replaced username text with avatar image in header
- Created dropdown menu with navigation items (Users, Audit, Suggestions)
- Added logout button to menu
- Implemented keyboard accessibility (tabindex, role, keyup handlers)

### Token Refresh (#44)
- Implemented automatic token refresh every 13 minutes in background
- Added proactive refresh to prevent token expiry during form filling
- Prevents users from losing form data due to expired sessions

### Centralised Logging (#1)
- Created `/log` endpoint on API to receive frontend logs
- Replaced API console.log calls with @nhcarrigan/logger
- Created ConsoleLoggerService to intercept all console methods on frontend
- Added global error handlers (window.error, unhandledrejection) on frontend
- Added process error handlers (uncaughtException, unhandledRejection, SIGTERM, SIGINT) on API
- All frontend console activity now forwarded to centralised logging

### Error Handling
- Created ToastService and ToastComponent for displaying errors
- Integrated with GlobalErrorHandler and HTTP interceptor
- Added accessibility features (keyboard navigation, ARIA attributes)
- Set toast opacity to 40% for optimal readability

### Testing & Build
- Fixed pre-existing test failure for GET / route (now returns version info)
- Added ESM module mocking (jsdom, marked, dompurify, @nhcarrigan/logger)
- Configured Jest with isolatedModules to handle TypeScript errors
- Excluded test-setup.ts from production build
- All tests passing (123 total)
- Build passing with no errors

## Test Plan

- [x] All tests pass (123 tests)
- [x] Build passes without errors
- [x] Lint passes (only pre-existing warnings)
- [x] Date fields work correctly on all media types
- [x] Retired status displays and filters properly
- [x] Avatar menu opens/closes correctly with keyboard and mouse
- [x] Token refresh prevents session expiry
- [x] Toast notifications appear for errors
- [x] Frontend logs forward to API successfully
- [x] Root route returns version information

Closes #41
Closes #43
Closes #44
Closes #46
Closes #1

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-authored-by: Hikari <hikari@nhcarrigan.com>
Reviewed-on: #50
Co-authored-by: Naomi Carrigan <commits@nhcarrigan.com>
Co-committed-by: Naomi Carrigan <commits@nhcarrigan.com>

package.json

@@ -3,8 +3,9 @@
   "version": "0.0.0",
   "license": "MIT",
   "scripts": {
+    "dev": "nx run-many --target=build --all && NODE_ENV=production op run --env-file=dev.env -- node dist/api/main.js",
     "lint": "nx run-many --target=lint --all",
-    "build": "nx run-many --target=build --all",
+    "build": "pnpm db:gen && nx run-many --target=build --all",
     "test": "nx run-many --target=test --all --passWithNoTests",
     "build:frontend": "nx build frontend --configuration=production",
     "build:api": "nx build api",
@@ -25,21 +26,22 @@
     "@angular/platform-browser": "21.1.2",
     "@angular/router": "21.1.2",
     "@fastify/autoload": "6.0.3",
-    "@fastify/cookie": "^11.0.2",
-    "@fastify/cors": "^11.0.0",
-    "@fastify/csrf-protection": "^7.1.0",
-    "@fastify/helmet": "^13.0.2",
-    "@fastify/jwt": "^10.0.0",
-    "@fastify/oauth2": "^8.1.2",
-    "@fastify/rate-limit": "^10.3.0",
+    "@fastify/cookie": "11.0.2",
+    "@fastify/cors": "11.0.0",
+    "@fastify/csrf-protection": "7.1.0",
+    "@fastify/helmet": "13.0.2",
+    "@fastify/jwt": "10.0.0",
+    "@fastify/oauth2": "8.1.2",
+    "@fastify/rate-limit": "10.3.0",
     "@fastify/sensible": "6.0.4",
-    "@fastify/static": "^9.0.0",
+    "@fastify/static": "9.0.0",
+    "@nhcarrigan/logger": "1.1.1",
     "@prisma/client": "6.19.2",
-    "dompurify": "^3.3.1",
+    "dompurify": "3.3.1",
     "fastify": "5.7.3",
     "fastify-plugin": "5.0.1",
-    "jsdom": "^28.0.0",
-    "marked": "^17.0.1",
+    "jsdom": "28.0.0",
+    "marked": "17.0.1",
     "rxjs": "7.8.2"
   },
   "devDependencies": {
@@ -65,10 +67,10 @@
     "@swc-node/register": "1.9.2",
     "@swc/core": "1.5.29",
     "@swc/helpers": "0.5.18",
-    "@types/dompurify": "^3.2.0",
+    "@types/dompurify": "3.2.0",
     "@types/jest": "30.0.0",
-    "@types/jsdom": "^27.0.0",
-    "@types/jsonwebtoken": "^9.0.10",
+    "@types/jsdom": "27.0.0",
+    "@types/jsonwebtoken": "9.0.10",
     "@types/node": "20.19.9",
     "@typescript-eslint/utils": "8.54.0",
     "angular-eslint": "21.1.0",