feat(5.16+5.17): tipografie/antet branded + tipuri cont, planuri si enforcement

PRD 5.16 — propagare design finalizata (system font stack, fara IBM Plex self-hostat):
- US-001/002/008: tokeni --font-ui/--font-mono (system stack) + scala --fs-*; zero
  @font-face si zero /static/fonts/; landing aliniat la acelasi stack
- US-003: RAR online = dot compact in antet + meniu burger; banda rosie DOAR pe blocat
  (invariant zero-silent-failures pastrat)
- US-010: antet "ROMFAST AUTOPASS" + nume service + /login brandeit 2 coloane + badge plan;
  meniu burger cu separatoare; gate strict pe is_authenticated
- US-011: selector tema pill icon+eticheta (reuse THEMES)
- US-004/005/006/007: bug-fix editor prestatii (picker cod+denumire, add_extra in mod
  operatii, cod ales se salveaza fara "+", Renunta inchide via closest)
- US-012/013: landing Autentificare->/login; wizard import colapsat + 4 pasi pe tokeni
- fix VERIFY E2E: contoare duplicate pe 390px (inline display:flex batea @media) -> CSS + test-lock

PRD 5.17 — tipuri de cont + trial Pro 30z + enforcement DUR:
- US-001/002/008: accounts.tier + trial_until (migrare aditiva defensiva); app/plans.py
  sursa unica (PLANS, FREE_MONTHLY_LIMIT=60, effective_tier(now injectabil), monthly_usage,
  CONSUMED_STATUSES); create_account trial Pro 30z; CLI set-tier (protejat id=1, audit)
- US-003/004/005: enforce volum 60/luna INAINTE de build_key pe ambele canale
  (PLAN_LIMITA_LUNARA, 3 niveluri + log_event); gate API Pro+ (PLAN_FARA_API 403 actionabil);
  valideaza/nomenclator raman permise; downgrade lazy; flag AUTOPASS_ENFORCE_PLANS (kill-switch)
- US-006: badge plan antet + linie burger + consum N/60 + warn>=80% + 6 stari + copy RO
  pluralizat + banner one-time trial->Gratuit + pagina Cont

Regresie: 1380 passed, 0 failed, 1 deselected (live). E2E browser pe 390/1280 confirmat.
Backend trimitere (worker/masina stari/idempotenta/contract RAR) NEATINS. Lucrul 5.18
(corpus kNN) ramane separat, necomis.

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

app/web/templates/_chips_prestatii.html

@@ -117,6 +117,60 @@
     {% endif %}
     {% endfor %}
 
+    {# ===== US-005 (5.16): Chips extra + picker '+ Adauga alta operatie / cod RAR' in mod operatii ===== #}
+    {# Chips extra: cod_op_service gol, cod_prestatie setat — afisate flat cu × (reuse remove_flat) #}
+    <div class="chips" role="group" aria-label="Coduri RAR suplimentare" style="margin-top:4px;">
+      {% for chip in _chips %}
+      {% if not chip.cod_op_service and chip.cod_prestatie %}
+      {% set _is_warn_extra = chip.cod_prestatie in ('R-ODO', 'I-ODO') %}
+      <span class="chip {% if _is_warn_extra %}chip-warn{% endif %}"
+            aria-label="Cod RAR suplimentar {{ chip.cod_prestatie }}">
+        {{ chip.cod_prestatie }}
+        <button type="button" class="chip-del"
+                hx-post="{{ _chips_url }}"
+                hx-include="closest form"
+                hx-target="#{{ _sec_id }}"
+                hx-swap="outerHTML"
+                hx-vals='{"chips_action":"remove_flat","chips_remove_cod":"{{ chip.cod_prestatie }}"}'
+                aria-label="Sterge codul suplimentar {{ chip.cod_prestatie }}">&times;</button>
+      </span>
+      {% endif %}
+      {% endfor %}
+    </div>
+    {% if nomenclator_rar %}
+    <span style="display:inline-flex;align-items:center;gap:4px;margin-top:4px;">
+      <select name="chips_add_cod_flat"
+              aria-label="Adauga cod RAR suplimentar"
+              style="min-width:160px;font-size:11px;height:26px;border:1px dashed color-mix(in srgb,var(--accent) 55%,var(--line));border-radius:5px;background:transparent;color:var(--accent);">
+        <option value="">+ Adauga alta operatie / cod RAR</option>
+        {% for n in nomenclator_rar %}
+        <option value="{{ n.cod_prestatie }}">{{ n.cod_prestatie }} — {{ n.nume_prestatie }}</option>
+        {% endfor %}
+      </select>
+      <button type="button"
+              class="add-code"
+              hx-post="{{ _chips_url }}"
+              hx-include="closest form"
+              hx-target="#{{ _sec_id }}"
+              hx-swap="outerHTML"
+              hx-vals='{"chips_action":"add_extra"}'
+              aria-label="Adauga cod RAR suplimentar la trimitere">
+        +
+      </button>
+    </span>
+    {% else %}
+    {# T-D1/T-E5 (5.16): empty state in mod operatii cand nomenclatorul lipseste #}
+    <div class="chips-nom-gol" style="font-size:11px;color:var(--warn);padding:4px 0;margin-top:4px;">
+      Nomenclator indisponibil — adaugarea de coduri suplimentare nu e posibila.
+    </div>
+    {% endif %}
+    {% if chips_extra_error %}
+    {# T-C1/T-E4 (5.16): semnal vizibil cand add_extra are select gol sau cod invalid #}
+    <div class="chips-extra-error" style="font-size:11px;color:var(--err);padding:2px 0;" role="alert">
+      Selecteaza un cod RAR din lista inainte de a adauga.
+    </div>
+    {% endif %}
+
     {% else %}
     {# ===== Mod plat: lista de coduri libere (corectie pura, fara op_service) ===== #}
     <div class="chips" role="group" aria-label="Coduri RAR selectate">
@@ -144,7 +198,7 @@
                 style="font-size:11px;height:22px;border:1px dashed color-mix(in srgb,var(--accent) 55%,var(--line));border-radius:5px;background:transparent;color:var(--accent);">
           <option value="">+ cod</option>
           {% for n in nomenclator_rar %}
-          <option value="{{ n.cod_prestatie }}">{{ n.cod_prestatie }}</option>
+          <option value="{{ n.cod_prestatie }}">{{ n.cod_prestatie }} — {{ n.nume_prestatie }}</option>
           {% endfor %}
         </select>
         <button type="button"
@@ -158,6 +212,11 @@
           +
         </button>
       </span>
+      {% else %}
+      {# T-D1/T-E5 (5.16): empty state in mod plat cand nomenclatorul lipseste #}
+      <div class="chips-nom-gol" style="font-size:11px;color:var(--warn);padding:4px 0;">
+        Nomenclator indisponibil — nu se pot adauga coduri RAR momentan.
+      </div>
       {% endif %}
     </div>
     {% endif %}