feat(web): uniformizare/standardizare UI/UX + lifecycle conturi (PRD 5.5)

Aduce toate suprafetele dashboard-ului la grila tabelului Trimiteri, muta
navigarea intr-un meniu de cont (hamburger) si da panoului admin actiuni
reale de ciclu de viata. 9 stories, 3 valuri. UI pur (reskin + reasezare)
cu O SINGURA exceptie backend: modelul de stare a contului.

- US-001 sectiunea "Ajutor" eliminata din Acasa (wayfinding redundant).
- US-002 Nomenclator la grila standard (_submissions.html ca referinta).
- US-003 macro autosend compact (Manual<->Auto). Semantica de PREZENTA
  `auto_send` (bifat->true, absent->false) NEALTERATA — compatibil cu ambele
  parsere (Form(bool) la /mapari, bool(form.get()) la import). Zero backend.
- US-004 accounts.status (pending/active/blocked/archived/deleted), migrare
  defensiva idempotenta derivata din `active`, gate worker claim_one pe
  status='active' (echivalenta active=1 <=> status='active' pastrata).
- US-005 tabel Mapari compact + panou Ajutor (<details>, proza o singura data),
  coloana "In coada".
- US-006 meniu hamburger dropdown (Cont/Integrare/Nomenclator/Admin/logout) +
  context is_authenticated/is_admin/csrf_token defensiv in base.html.
- US-007 tab-bar redus la Acasa+Mapari; rutele /_fragments/{cont,integrare,
  nomenclator} + deep-link ?tab= raman valide.
- US-008 rute admin block/archive/delete + bulk pe lista account_id,
  require_admin + CSRF + PRG, dev id=1 sarit in bulk.
- US-009 admin UI: selectie bife + master + bara bulk + kebab per-rand,
  grupare pe stare (bloc nou blocate/arhivate), nota "cont dev implicit" scoasa.

Stergere = SOFT: tombstone (status='deleted'), dar PII purjata IMEDIAT
(rar_creds_enc + chei API revocate + CUI eliberat pentru re-inregistrare),
GDPR/L.142.

VERIFY: 671 teste pass (+40). E2E browser (Playwright) a prins 2 bug-uri
invizibile la TestClient: bara bulk cu display:flex inline invingea [hidden]
(mutat in CSS .bulk-bar[hidden]); conturi arhivate cadeau sub "in asteptare"
(grupare pe status). /code-review high a prins 2 bug-uri reale: soft delete
pastra creds RAR + CUI la nesfarsit fara purjare accounts (GDPR neonorat);
apostrof in numele firmei rupea confirm() inline din kebab — ambele reparate,
plus cleanup boilerplate rute (_lifecycle_route).

Backend trimitere (worker masina stari/idempotenta/mapping) neatins, cu
exceptia gate-ului de cont. Design: docs/design/5.5-uniformizare-ui.md.

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

tests/test_web_tabs.py

@@ -73,7 +73,7 @@ def client(monkeypatch):
 # ============================================================
 
 def test_dashboard_are_tabbar(client):
-    """Dashboard-ul contine un tab-bar cu cele 6 tab-uri."""
+    """US-007 (5.5): tab-bar redus la Acasa + Mapari; Cont/Integrare/Nomenclator in meniul ☰."""
     _create_account_user("tabbar@test.com", "parolasecreta10")
     _login(client, "tabbar@test.com", "parolasecreta10")
 
@@ -83,12 +83,15 @@ def test_dashboard_are_tabbar(client):
     html = resp.text
     assert 'role="tablist"' in html, "Lipseste role=tablist"
 
-    # Tab-urile trebuie sa fie prezente (Import a fuzionat in Acasa; "Coada"->"Trimiteri" — PRD 3.5)
-    for label in ("Acasa", "Trimiteri", "Mapari", "Cont", "Nomenclator"):
-        assert label in html, f"Lipseste tab-ul '{label}' din tab-bar"
-    # "Import" nu mai e un tab separat in tab-bar (importul e direct pe Acasa)
-    assert not re.search(r'role="tab"[^>]*>\s*Import\s*<', html), \
-        "Tab-ul 'Import' nu ar mai trebui sa existe ca tab separat (US-002)"
+    # Doar Acasa + Mapari sunt tab-uri (role="tab")
+    assert re.search(r'role="tab"[^>]*>\s*Acasa', html), "Lipseste tab-ul Acasa"
+    assert re.search(r'role="tab"[^>]*>\s*Mapari', html), "Lipseste tab-ul Mapari"
+    # Cont/Integrare/Nomenclator NU mai sunt tab-uri
+    for label in ("Cont", "Integrare", "Nomenclator", "Import"):
+        assert not re.search(rf'role="tab"[^>]*>\s*{label}\s*<', html), \
+            f"'{label}' nu ar mai trebui sa fie un tab separat (mutat in meniu)"
+    # ...dar traiesc in meniul de cont
+    assert 'href="/?tab=cont"' in html and 'href="/?tab=nomenclator"' in html
 
 
 # ============================================================
@@ -215,3 +218,20 @@ def test_tabbar_aria(client):
     assert 'role="tabpanel"' in html, "Lipseste role=tabpanel"
     assert 'aria-selected="true"' in html, "Lipseste aria-selected=true pe tab-ul activ"
     assert 'aria-selected="false"' in html, "Lipseste aria-selected=false pe tab-urile inactive"
+
+
+# ============================================================
+# test_fragmentele_mutate_raman_accesibile (US-007)
+# ============================================================
+
+def test_fragmentele_mutate_raman_accesibile(client):
+    """US-007 (5.5): Cont/Integrare/Nomenclator s-au mutat in meniu, dar rutele de fragment
+    si deep-link-ul ?tab= raman valide (zero rute moarte / 404)."""
+    _create_account_user("frag@test.com", "parolasecreta10")
+    _login(client, "frag@test.com", "parolasecreta10")
+
+    for tab in ("cont", "integrare", "nomenclator"):
+        r_frag = client.get(f"/_fragments/{tab}")
+        assert r_frag.status_code == 200, f"/_fragments/{tab} a dat {r_frag.status_code}"
+        r_deep = client.get(f"/?tab={tab}")
+        assert r_deep.status_code == 200, f"/?tab={tab} a dat {r_deep.status_code}"