fix(engine,server): safe area clamp, analytics batch, achievement save order, daily rollover, replay validation, leaderboard opt-in (#56, #60, #61, #62, #66, #68)

- #66: Clamp safe-area insets to 25% of window height with warn!() on excess
- #68: Move fire_flush outside per-event loop in analytics (batch flush once)
- #56: Persist progress before marking reward_granted to prevent XP loss on crash
- #60: Add DateRolloverTimer + check_date_rollover system for midnight seed refresh
- #62: Add validate_header() in replay upload with mode/draw_mode allowlists
- #61: Restore two-query leaderboard opt-in check (SELECT then UPDATE); original
       queries already in .sqlx cache; EXISTS variant would require sqlx prepare

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>

solitaire_engine/src/theme/plugin.rs

@@ -194,8 +194,7 @@ fn sync_card_image_set_with_active_theme(
     // Consume asset events — covers the normal first-load path.
     for ev in events.read() {
         let id = match ev {
-            AssetEvent::LoadedWithDependencies { id }
-            | AssetEvent::Modified { id } => *id,
+            AssetEvent::LoadedWithDependencies { id } | AssetEvent::Modified { id } => *id,
             _ => continue,
         };
         if id == active_id {
@@ -245,9 +244,19 @@ fn sync_card_image_set_with_active_theme(
 fn apply_theme_to_card_image_set(theme: &CardTheme, image_set: &mut CardImageSet) {
     for suit in [Suit::Clubs, Suit::Diamonds, Suit::Hearts, Suit::Spades] {
         for rank in [
-            Rank::Ace, Rank::Two, Rank::Three, Rank::Four, Rank::Five,
-            Rank::Six, Rank::Seven, Rank::Eight, Rank::Nine, Rank::Ten,
-            Rank::Jack, Rank::Queen, Rank::King,
+            Rank::Ace,
+            Rank::Two,
+            Rank::Three,
+            Rank::Four,
+            Rank::Five,
+            Rank::Six,
+            Rank::Seven,
+            Rank::Eight,
+            Rank::Nine,
+            Rank::Ten,
+            Rank::Jack,
+            Rank::Queen,
+            Rank::King,
         ] {
             if let Some(handle) = theme.faces.get(&CardKey::new(suit, rank)) {
                 image_set.faces[suit_index(suit)][rank_index(rank)] = handle.clone();
@@ -348,10 +357,7 @@ fn read_theme_preview_svg_bytes(theme_id: &str, filename: &str) -> Option<Vec<u8
 /// [`Handle::default`] if rasterisation fails (malformed SVG, etc.) so
 /// the picker can render a placeholder for broken themes without
 /// crashing.
-fn rasterize_preview_to_handle(
-    svg_bytes: &[u8],
-    images: &mut Assets<Image>,
-) -> Handle<Image> {
+fn rasterize_preview_to_handle(svg_bytes: &[u8], images: &mut Assets<Image>) -> Handle<Image> {
     let target = UVec2::new(THEME_THUMBNAIL_WIDTH_PX, THEME_THUMBNAIL_HEIGHT_PX);
     match rasterize_svg(svg_bytes, target) {
         Ok(image) => images.add(image),
@@ -365,10 +371,7 @@ fn rasterize_preview_to_handle(
 /// Builds a [`ThemeThumbnailPair`] for a single theme. Either handle
 /// is [`Handle::default`] when the matching SVG could not be located
 /// or rasterised.
-fn generate_thumbnail_pair_for(
-    theme_id: &str,
-    images: &mut Assets<Image>,
-) -> ThemeThumbnailPair {
+fn generate_thumbnail_pair_for(theme_id: &str, images: &mut Assets<Image>) -> ThemeThumbnailPair {
     let ace = read_theme_preview_svg_bytes(theme_id, PREVIEW_FACE_FILENAME)
         .map(|b| rasterize_preview_to_handle(&b, images))
         .unwrap_or_default();
@@ -543,8 +546,14 @@ mod tests {
         );
         // And the underlying images must actually exist in the assets
         // collection — the handles are real, not dangling.
-        assert!(images.get(&pair.ace).is_some(), "ace image must be inserted");
-        assert!(images.get(&pair.back).is_some(), "back image must be inserted");
+        assert!(
+            images.get(&pair.ace).is_some(),
+            "ace image must be inserted"
+        );
+        assert!(
+            images.get(&pair.back).is_some(),
+            "back image must be inserted"
+        );
     }
 
     /// Test 2: when a theme is registered but its preview SVGs are not