fix: comprehensive audit fixes for dashboard and backend

Backend:
- Emit WebSocket events from REST delete/promote/demote handlers
- Emit DreamStarted/ConsolidationStarted from MCP tool dispatch
- Add path validation in backup_to() for defense-in-depth

Dashboard:
- Fix ConnectionDiscovered field names (source_id/target_id)
- Fix $effect → onMount in settings (prevents infinite loop)
- Fix $derived → $derived.by in RetentionCurve
- Fix field name mismatches in settings (nodesProcessed, etc.)
- Fix nested <button> → <span role="button"> in memories
- Fix unhandled Promise rejection in stats consolidation
- Add missing EVENT_TYPE_COLORS entries
- Add Three.js resource disposal and event listener cleanup
- Eliminate duplicate root page, redirect to /graph
- Update nav links and keyboard shortcuts to /graph

All 734+ tests passing, 22MB binary, zero build warnings.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

apps/dashboard/build/_app/immutable/nodes/1.DRopMp8H.js.br

@@ -0,0 +1,3 @@
+f`…qc˝‰U´v<C2B4>÷öT•y˝UŻDň»<0C>> ęŕĽţŇŔ†UňČĂ‘ň§zČ'ŤZě,kQŽr–1&%zŠ}µ‹ýś[[O·†$ČבfÁźµÓéš­ÇÝÍ•ţNv!U¬:·7mČ—źR覤•{gEĚŰ<C49A>ní‘2‘pX ¸@aÇ
Ś
+„"˛ąQ˙’µ<>ťb\ófB­Ö<C2AD>AŢł=˝<>->ŕŘĺß·6P›ęVŇŽOë<,vŚçŰç
+ËżZÜżUŮ(7Ř91ľQłęŁk¨ÖZcśˇâ:Ý«Ť”`qŐ"随c.ටŇč5zăÄď#-áů·"ŹÔIYůÇ!16ˇt0<74>ě´!u›@C€ŕÂ
'‘G/ĂRĂ˙ń¬™‰D ô}Ă<>t˘Y<CB98>:a‘‹ÁI”á´‹2g}fËx<C38B>ă`\ÔÚĹŰ°Ěhć±&