Merge branch 'main' into fix/v4.3.3-dev

Brings the v4.3.3 release back into the dev line, so the 4.4.0 release
merges into main without conflicts. All twelve conflicts resolve to the
dev side, which carries the same fixes adapted to dev (migration order
of #2527, dev only code around the costs and PWA fixes). Against the dev
fixes alone, the only change is the version bump to 4.3.3.

charts/trek/Chart.yaml

@@ -1,5 +1,5 @@
 apiVersion: v2
 name: trek
-version: 4.3.2
+version: 4.3.3
 description: Minimal Helm chart for TREK app
-appVersion: "4.3.2"
+appVersion: "4.3.3"

client/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@trek/client",
-  "version": "4.3.2",
+  "version": "4.3.3",
   "private": true,
   "type": "module",
   "scripts": {

package-lock.json

@@ -1,12 +1,12 @@
 {
   "name": "@trek/root",
-  "version": "4.3.2",
+  "version": "4.3.3",
   "lockfileVersion": 3,
   "requires": true,
   "packages": {
     "": {
       "name": "@trek/root",
-      "version": "4.3.2",
+      "version": "4.3.3",
       "workspaces": [
         "client",
         "server",
@@ -25,7 +25,7 @@
     },
     "client": {
       "name": "@trek/client",
-      "version": "4.3.2",
+      "version": "4.3.3",
       "hasInstallScript": true,
       "dependencies": {
         "@fontsource/bebas-neue": "^5.3.0",
@@ -21444,7 +21444,7 @@
     },
     "server": {
       "name": "@trek/server",
-      "version": "4.3.2",
+      "version": "4.3.3",
       "dependencies": {
         "@aws-lite/client": "^0.23.7",
         "@aws-lite/s3": "^0.2.7",
@@ -21825,7 +21825,7 @@
     },
     "shared": {
       "name": "@trek/shared",
-      "version": "4.3.2",
+      "version": "4.3.3",
       "dependencies": {
         "isomorphic-dompurify": "^3.15.0",
         "zod": "^4.3.6"

package.json

@@ -1,7 +1,7 @@
 {
   "name": "@trek/root",
   "private": true,
-  "version": "4.3.2",
+  "version": "4.3.3",
   "workspaces": [
     "client",
     "server",

server/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@trek/server",
-  "version": "4.3.2",
+  "version": "4.3.3",
   "main": "src/index.ts",
   "scripts": {
     "start": "node --require tsconfig-paths/register dist/index.js",

shared/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@trek/shared",
-  "version": "4.3.2",
+  "version": "4.3.3",
   "private": true,
   "description": "Shared API contracts (Zod schemas) — single source of truth for TREK server and client.",
   "type": "module",