fix: P0 audit sweep — kill silent failures, stop deploy-pill loop, fix all test/type errors

fix: P0 audit sweep — kill silent failures, stop deploy-pill loop, fix all test/type errors

Implements every P0 + one P2 from the May 15 deep audit. Closes the
"the website has a lot of errors" thread of frustration.

## P0 #1 — Global softAuth
`src/app.tsx` — softAuth is now `app.use("*")` instead of per-route.
Every downstream middleware (rate-limit, future auth-aware logging,
metrics) can now read c.get("user") cheaply. Fixes the rate-limit
authedMultiplier:4 which was dead code on /api/* because softAuth had
never run by the time the bucket was checked.

## P0 #2 — runScheduledWorkflowsTick fail-open
`src/lib/scheduled-workflows.ts` — coerce candidates to [] if it's not
iterable after the DB try/catch. A leaked module-mock from another
test was returning {} which crashed `for (const w of candidates)` with
TypeError. The single recurring test failure is now green.

## P0 #3 + #10 + #11 — Bootstrap surfaces real errors
`src/routes/admin-self-host.tsx` — three changes:
  (a) REAL_DEPS.spawn now redirects stdout+stderr to
      /var/log/gluecron-bootstrap.log (truncated per run, then
      appended). The old "ignore" pipes meant every failure was
      invisible.
  (b) Pre-check existsSync on bunCmd + scriptPath before spawning.
      Missing binary → friendly error redirect, not silent "success".
  (c) Success redirect message now points at the log path so the
      operator knows where to look.

## P0 #5 — UI hint: SELF_HOST_REPO needs systemctl restart
`src/routes/admin-self-host.tsx` — when SELF_HOST_REPO is unset, the
env card now shows a yellow hint box explaining the value is read at
service start, with the exact command to refresh it. Stops the
"I appended to /etc/gluecron.env but the page still says Unset"
confusion.

## P0 #6 — Type errors in self-host.test.ts
`src/hooks/post-receive.ts` — __setSelfHostSpawnForTests now accepts
`fn | null`; null resets to Bun.spawn. Matches the test contract.
`src/__tests__/self-host.test.ts` — explicit annotation on .find
callback parameter.

## Deploy-pill loop (the "looping in background" symptom)
`src/views/layout.tsx` — SSE reconnect was a tight 1500ms loop; on
any proxy timeout or connection blip the pill re-rendered every 1.5s,
producing the visible interruption. Switched to exponential backoff
(2s → 60s cap) with reset on successful message receipt.

## P2 #15 — On-disk hook sources /etc/gluecron.env
`scripts/self-host-bootstrap.ts` — SELF_HOST_HOOK_BODY now sources
/etc/gluecron.env before reading GLUECRON_SELF_DEPLOY_SCRIPT. systemd
EnvironmentFile only propagates to the gluecron service, not to git
hooks invoked by direct SSH receive-pack — without this source the
hook used baked-in defaults that silently disagreed with operator env.

## Test results
- bun test → 1994 pass / 0 fail / 2 skip (up from 1993/1/2)
- bunx tsc --noEmit → clean (the 3 pre-existing self-host.test.ts type
  errors are also closed)

https://claude.ai/code/session_01QFLWDxWw65DX6enMcS5Lwe