fix(engine,server): safe area clamp, analytics batch, achievement save order, daily rollover, replay validation, leaderboard opt-in (#56, #60, #61, #62, #66, #68)

- #66: Clamp safe-area insets to 25% of window height with warn!() on excess
- #68: Move fire_flush outside per-event loop in analytics (batch flush once)
- #56: Persist progress before marking reward_granted to prevent XP loss on crash
- #60: Add DateRolloverTimer + check_date_rollover system for midnight seed refresh
- #62: Add validate_header() in replay upload with mode/draw_mode allowlists
- #61: Restore two-query leaderboard opt-in check (SELECT then UPDATE); original
       queries already in .sqlx cache; EXISTS variant would require sqlx prepare

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>

solitaire_engine/src/avatar_plugin.rs

@@ -19,7 +19,7 @@
 
 use bevy::asset::RenderAssetUsages;
 use bevy::prelude::*;
-use bevy::tasks::{futures_lite::future, AsyncComputeTaskPool, Task};
+use bevy::tasks::{AsyncComputeTaskPool, Task, futures_lite::future};
 
 use crate::resources::TokioRuntimeResource;
 
@@ -60,7 +60,9 @@ impl Plugin for AvatarPlugin {
                     .add_systems(Update, handle_avatar_fetch);
             }
             Err(e) => {
-                bevy::log::warn!("avatar_plugin: Tokio runtime unavailable — avatar fetch disabled: {e}");
+                bevy::log::warn!(
+                    "avatar_plugin: Tokio runtime unavailable — avatar fetch disabled: {e}"
+                );
             }
         }
     }
@@ -78,14 +80,7 @@ fn handle_avatar_fetch(
         pending.0 = Some(AsyncComputeTaskPool::get().spawn(async move {
             rt.block_on(async move {
                 let client = reqwest::Client::new();
-                let bytes = client
-                    .get(&url)
-                    .send()
-                    .await
-                    .ok()?
-                    .bytes()
-                    .await
-                    .ok()?;
+                let bytes = client.get(&url).send().await.ok()?.bytes().await.ok()?;
                 Some(bytes.to_vec())
             })
         }));