feat(5.6): observabilitate + jurnal aplicatie + lifecycle trimiteri blocate

Implementeaza PRD 5.6 complet (14 stories, TDD). Doua axe:

Lifecycle trimiteri blocate (Val A):
- submissions_admin.py: sterge/repune scoped (404 cross-account inaintea lui 409 stare)
- reactivare dedup peste `error` cu CAS (WHERE id=? AND status='error'), creds noi in
  submissions + accounts.rar_creds_enc; worker invalideaza sesiunea RAR la creds proaspete
  (JWT 30h vechi nu mai trimite cu parola gresita); camp aditiv `reactivated:true`
- retentie randuri blocate 30z; purge_expired exclude queued/sending; purge_after curatat
  la reactivare/requeue
- API DELETE /v1/prezentari/{id} + /repune (200+JSON); UI butoane + bulk + banner actionabil

Observabilitate:
- app/observ.py log_event: dublu canal app_events (DB) + RotatingFileHandler per-proces,
  redactare creds/PII la scriere (redact_pii/vin_partial)
- request_id middleware + X-Request-ID pe toate raspunsurile
- handler global excepții -> 500 envelope 6-chei + request_id (traceback doar in jurnal)
- audit cerere API (api_prezentari/api_auth_esuat) + audit worker (rar_login/tranzitii)
- tab "Jurnal" filtrabil scoped (non-admin doar contul sau); retentie jurnal 90z
- rar_error expus in GET /v1/prezentari/{id} (recovery observabil)

pytest -q: 741 passed, 0 failed. Docs: PRD raport VERIFY, contract endpointuri noi, ROADMAP.

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

tests/test_t16_purjare.py

@@ -65,14 +65,18 @@ def test_mark_sent_seteaza_purge_after(conn):
     assert is_future, "purge_after trebuie sa fie in viitor"
 
 
-def test_mark_other_status_nu_seteaza_purge_after(conn):
-    """Alte statusuri (error, needs_data) nu seteaza purge_after."""
+def test_mark_queued_nu_seteaza_purge_after(conn):
+    """Starile active (queued) nu primesc purge_after.
+
+    NOTA US-013: error/needs_data/needs_mapping primesc ACUM purge_after (retentie
+    blocate, 30z) — vezi tests/test_purge_blocate.py. Doar queued/sending raman fara.
+    """
     import app.worker.__main__ as w
     sid = _insert_submission(conn)
-    w.mark(conn, sid, "error", rar_error="test")
+    w.mark(conn, sid, "queued")
 
     row = conn.execute("SELECT purge_after FROM submissions WHERE id=?", (sid,)).fetchone()
-    assert row["purge_after"] is None, "purge_after nu trebuie setat la 'error'"
+    assert row["purge_after"] is None, "purge_after nu trebuie setat la 'queued'"
 
 
 # --- (b) purge_expired sterge randurile expirate ---