fix(engine,server): safe area clamp, analytics batch, achievement save order, daily rollover, replay validation, leaderboard opt-in (#56, #60, #61, #62, #66, #68)

- #66: Clamp safe-area insets to 25% of window height with warn!() on excess
- #68: Move fire_flush outside per-event loop in analytics (batch flush once)
- #56: Persist progress before marking reward_granted to prevent XP loss on crash
- #60: Add DateRolloverTimer + check_date_rollover system for midnight seed refresh
- #62: Add validate_header() in replay upload with mode/draw_mode allowlists
- #61: Restore two-query leaderboard opt-in check (SELECT then UPDATE); original
       queries already in .sqlx cache; EXISTS variant would require sqlx prepare

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>

solitaire_engine/src/theme/registry.rs

@@ -291,9 +291,7 @@ mod tests {
 
     #[test]
     fn nonexistent_user_dir_still_yields_bundled_entries() {
-        let registry = build_registry(Path::new(
-            "/definitely/not/a/real/path/should/not/panic",
-        ));
+        let registry = build_registry(Path::new("/definitely/not/a/real/path/should/not/panic"));
         assert_eq!(registry.len(), BUNDLED_COUNT);
         assert!(registry.find("classic").is_some());
         assert!(registry.find("dark").is_some());
@@ -353,7 +351,11 @@ mod tests {
         write_manifest(&theme_dir, "../etc/passwd", "Evil");
 
         let registry = build_registry(tmp.path());
-        assert_eq!(registry.len(), BUNDLED_COUNT, "escape attempt must not register");
+        assert_eq!(
+            registry.len(),
+            BUNDLED_COUNT,
+            "escape attempt must not register"
+        );
         assert!(registry.find("classic").is_some());
     }