feat(5.6): observabilitate + jurnal aplicatie + lifecycle trimiteri blocate

Implementeaza PRD 5.6 complet (14 stories, TDD). Doua axe:

Lifecycle trimiteri blocate (Val A):
- submissions_admin.py: sterge/repune scoped (404 cross-account inaintea lui 409 stare)
- reactivare dedup peste `error` cu CAS (WHERE id=? AND status='error'), creds noi in
  submissions + accounts.rar_creds_enc; worker invalideaza sesiunea RAR la creds proaspete
  (JWT 30h vechi nu mai trimite cu parola gresita); camp aditiv `reactivated:true`
- retentie randuri blocate 30z; purge_expired exclude queued/sending; purge_after curatat
  la reactivare/requeue
- API DELETE /v1/prezentari/{id} + /repune (200+JSON); UI butoane + bulk + banner actionabil

Observabilitate:
- app/observ.py log_event: dublu canal app_events (DB) + RotatingFileHandler per-proces,
  redactare creds/PII la scriere (redact_pii/vin_partial)
- request_id middleware + X-Request-ID pe toate raspunsurile
- handler global excepții -> 500 envelope 6-chei + request_id (traceback doar in jurnal)
- audit cerere API (api_prezentari/api_auth_esuat) + audit worker (rar_login/tranzitii)
- tab "Jurnal" filtrabil scoped (non-admin doar contul sau); retentie jurnal 90z
- rar_error expus in GET /v1/prezentari/{id} (recovery observabil)

pytest -q: 741 passed, 0 failed. Docs: PRD raport VERIFY, contract endpointuri noi, ROADMAP.

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

tests/test_worker_reconcile.py

@@ -203,6 +203,45 @@ def test_recover_orphan_neinregistrat_requeue(env):
     assert _status(conn, sid)["status"] == "queued"
 
 
+def test_recover_orphan_ignora_randul_proaspat_claim(env):
+    """Regresie format data: un rand PROASPAT revendicat NU trebuie tratat ca orfan.
+
+    claim_one scrie sending_since cu datetime('now') -> 'YYYY-MM-DD HH:MM:SS' (spatiu).
+    Bug-ul: cutoff calculat cu _iso() era in format ISO ('T'), iar la comparatie de string
+    spatiul (0x20) < 'T' (0x54) facea ca ORICE rand 'sending' sa para <= cutoff -> lease-ul
+    de 120s era ignorat si fiecare rand revendicat era reconciliat/requeue-uit instant.
+    """
+    from app.worker.__main__ import claim_one, recover_orphans
+    conn, settings = env
+    _insert(conn)                       # queued
+    claimed = claim_one(conn)           # -> sending, sending_since=datetime('now')
+    assert claimed is not None
+    # Chiar daca recordul ar exista la RAR, randul proaspat nu trebuie atins.
+    rar = FakeRar(finalizate=[{"id": 999, "vin": "WVWZZZ1KZAW000123",
+                               "dataPrestatie": "2026-06-15", "odometruFinal": 123456}])
+    n = recover_orphans(conn, settings, rar, "tok")
+    assert n == 0                       # nu l-a recuperat
+    assert rar.finalizate_calls == 0    # nici macar nu a interogat RAR
+    assert _status(conn, claimed["id"])["status"] == "sending"  # neatins
+
+
+def test_recover_orphan_lease_depasit_format_sqlite(env):
+    """Complementar: un rand 'sending' mai vechi decat lease-ul (format SQLite, spatiu) ESTE orfan."""
+    from app.worker.__main__ import recover_orphans
+    conn, settings = env
+    cur = conn.execute(
+        "INSERT INTO submissions (idempotency_key, status, payload_json, sending_since) "
+        "VALUES (?, 'sending', ?, datetime('now', '-1 hour'))",
+        (f"key-{os.urandom(4).hex()}", json.dumps(_CONTENT)),
+    )
+    sid = int(cur.lastrowid)
+    rar = FakeRar(finalizate=[{"id": 888, "vin": "WVWZZZ1KZAW000123",
+                               "dataPrestatie": "2026-06-15", "odometruFinal": 123456}])
+    n = recover_orphans(conn, settings, rar, "tok")
+    assert n == 1
+    assert _status(conn, sid)["status"] == "sent"
+
+
 def test_claim_respecta_next_attempt_at(env):
     from app.worker.__main__ import claim_one
     conn, _ = env