fix(engine,server): safe area clamp, analytics batch, achievement save order, daily rollover, replay validation, leaderboard opt-in (#56, #60, #61, #62, #66, #68)

- #66: Clamp safe-area insets to 25% of window height with warn!() on excess
- #68: Move fire_flush outside per-event loop in analytics (batch flush once)
- #56: Persist progress before marking reward_granted to prevent XP loss on crash
- #60: Add DateRolloverTimer + check_date_rollover system for midnight seed refresh
- #62: Add validate_header() in replay upload with mode/draw_mode allowlists
- #61: Restore two-query leaderboard opt-in check (SELECT then UPDATE); original
       queries already in .sqlx cache; EXISTS variant would require sqlx prepare

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>

solitaire_engine/src/time_attack_plugin.rs

@@ -404,7 +404,10 @@ mod tests {
         advance_by(&mut app, 0.4);
 
         let session = app.world().resource::<TimeAttackResource>();
-        assert!(session.active, "session must stay active while a modal is open");
+        assert!(
+            session.active,
+            "session must stay active while a modal is open"
+        );
         assert_eq!(session.remaining_secs, 5.0);
 
         let events = app.world().resource::<Messages<TimeAttackEndedEvent>>();