[atulmgupta]

Description

Follow-up to squash-merged #198.

• Vehicle cost, Energy flow and Science lab now follow the workspace historical range with exact server bounds and their existing span limits. Charge advisor keeps its independent future planning window.
• Charger categories translate from stable codes while supplied names remain unchanged. Typed anomaly facts localize in both timeline and dashboard, with legacy prose fallback.
• Automation Duplicate creates a disabled copy through the create API and opens it. Export is hidden because the current serializer cannot guarantee secret-free definitions.
• Every dashboard widget now uses one shared freshness header. Inline expand/edit controls precede the corner dot; removed the reserved overlay space and VehicleHero body dot. Added all121-widget size/mode geometry and eight responsive light/dark guards.
• Direct Mermaid12 rendering clears the docs KaTeX findings. Vite6.4.4 fixes the launch-editor advisories in both projects, and Go1.27.3 fixes the reachable x509 advisory. Final audits are web9/docs0; the unpatched development dependency chains, uncalled OpenPGP advisory and Dependabot chore(deps): bump nginx from 1.31.5-alpine3.24 to 1.31.7-alpine3.24 #200 recommendation are recorded in docs/followups-plan.md.
• Insurance “0..60” is recorded as needing an owner decision, with its audit origin traced. Tailwind v4 follows in a separate draft PR after this PR is green.

The shared header keeps its28px title line while44px targets fit inside its padding, preserving body readings. The collision guard retains target-size, focus and hit-test assertions and enforces the requested icon-before-dot order and8px spacing. Secondary-engine navigation waits for the destination page and complete mocked requests before teardown.

The closed tour launcher loads on first request, keeping startup under the unchanged400KB limit. No workflow, coverage, skip or visual-tolerance changes.

Validation: complete local CI replica passes on the final security environment:57,191 unit tests (four existing pending),2,029 quality tests (two existing skips),49 Windows visual tests (41 existing profile skips),13 a11y,9 isolated performance and6 Firefox/WebKit tests. All browser wrappers report zero proxy escapes, zero retries. TypeScript, complete lint/audits, route generators/contracts/catalogs, production/mock/docs builds and strict399.6KB/400KB preflight pass; full Go build/test, pinned lint and govulncheck pass (zero reachable findings). All20 docs diagrams render with zero browser errors.

Remote head f84aad0:199 successful checks and one existing conditional skip. All workflows completed successfully. No merge performed.

Type of Change

• Bug fix (non-breaking change that fixes an issue)
• New feature (non-breaking change that adds functionality)
• Breaking change (fix or feature that would break existing functionality)
• Documentation update
• Infrastructure / CI change

Checklist

• My code follows the project's style guidelines
• I have performed a self-review of my code
• I have added tests that prove my fix is effective or my feature works
• New and existing tests pass locally
• I have updated the documentation accordingly
• My changes generate no new warnings

Screenshots (if applicable)

Eight dashboard captures (375/768/1280/1920, light/dark) are emitted by the new header smoke test into Frontend Quality artifacts. Compared old/new frames before regenerating exactly five intended dashboard baselines:390dark/light,1440dark/light and forced-colors. Their differences are the shared corner dot and consistent header-line height. The degraded profile is unchanged. The legacy visual fixture text-width pin now excludes widget headers so their snapshots exercise actual production geometry; masks and tolerances are unchanged.