fix: comprehensive audit fixes for dashboard and backend

Backend:
- Emit WebSocket events from REST delete/promote/demote handlers
- Emit DreamStarted/ConsolidationStarted from MCP tool dispatch
- Add path validation in backup_to() for defense-in-depth

Dashboard:
- Fix ConnectionDiscovered field names (source_id/target_id)
- Fix $effect → onMount in settings (prevents infinite loop)
- Fix $derived → $derived.by in RetentionCurve
- Fix field name mismatches in settings (nodesProcessed, etc.)
- Fix nested <button> → <span role="button"> in memories
- Fix unhandled Promise rejection in stats consolidation
- Add missing EVENT_TYPE_COLORS entries
- Add Three.js resource disposal and event listener cleanup
- Eliminate duplicate root page, redirect to /graph
- Update nav links and keyboard shortcuts to /graph

All 734+ tests passing, 22MB binary, zero build warnings.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

apps/dashboard/build/_app/immutable/chunks/dR5TMuCX.js.br

@@ -0,0 +1,3 @@
+@œvÓÇËø6Ö”
+¯bhËôýmZÁ{¡ß6ÈË1Av3«ÙénÚ¬“{š¨^*ô´ADPöFÖñç^ßp4ã)E•%M«'ü+u›ˆw]á´‰E}Å•ðÔ‘‡›KQè¨Â$}e˜JM`–¨VAæѧƒ…s÷ßü Tn^Jÿ¹å2XYŒGø[è§<C3A8>s%N|ñ·ÛþGÅ;Y,L
‹O<E280B9>ïÛ5Yø
sc¨ÎŸ¹I²Ä<C2B2>x²hY<18>{2²v|šÓg=ÖŽ&®½>ˆ“·
žÉˆB£¬±f¸’R
gÇ\NÍàÒXœ%Á~¾((mÅ:|”¡Mz
ƒ
+Àq¦Æ©<EFBFBD>Ò•ú:SP°n»äšëK†û¸r2Q°ûe27‰fPòAO¾Ç`Z•ÑÎøíà‹ïàâÌÒ9<C392>€ƒ”k‰îk÷g<C3B7>s