feat: schelet gateway FastAPI (API v1 + worker + dashboard + SQLite WAL)

Structura repo conform plan.md sect. 4, booteaza cu /healthz verde:
- app/main.py: FastAPI (lifespan init_db), /healthz (worker viu + last login + queue), /metrics
- app/api/v1: POST /v1/prezentari (enqueue + dedup idempotency UNIQUE), GET prezentari/{id}, nomenclator, mapari
- app/rar_client.py: client RAR real (login/JWT, nomenclator, postPrezentare, getFinalizate) cu User-Agent obligatoriu (fix WAF 403)
- app/worker: proces separat, claim atomic BEGIN IMMEDIATE, heartbeat, login+send (send dezactivat by default)
- app/web: dashboard Jinja2+HTMX (coada, banner alerta blocate, worker viu/mort, stari empty)
- app/db.py + schema.sql: SQLite WAL, tabele accounts/api_keys/operations_mapping/nomenclator_rar/submissions/worker_heartbeat
- app/idempotency.py + payload.py: hash continut canonic + builder payload (status FINALIZATA, fara tipPrestatie)
- Dockerfile + docker-compose.yml (api+worker, volum SQLite persistent, restart:always)
- tools/import_dbf.py: stub T5

Verificat live: login prin rar_client OK (token 259), nomenclator 18 coduri, worker heartbeat -> /healthz worker_alive=True.
Ramas: T3 validare Pydantic, T4 snapshot payload, T2 reconciliere/retry worker, T5 import DBF, auth API-key, middleware redactare creds, criptare PII.

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

app/web/routes.py

@@ -0,0 +1,85 @@
+"""Dashboard Jinja2 + HTMX (server-rendered, zero build).
+
+Schelet cu stari explicite: empty (coada goala), banner alerta blocate,
+worker viu/mort, ultimul login RAR. Editor mapari + browser nomenclator +
+export CSV + stare "RAR indisponibil" = de adaugat (plan.md sect. 4 + design-review).
+"""
+
+from __future__ import annotations
+
+from datetime import datetime, timezone
+from pathlib import Path
+
+from fastapi import APIRouter, Request
+from fastapi.responses import HTMLResponse
+from fastapi.templating import Jinja2Templates
+
+from .. import __version__
+from ..config import get_settings
+from ..db import get_connection, read_heartbeat
+
+router = APIRouter(tags=["web"])
+templates = Jinja2Templates(directory=str(Path(__file__).resolve().parent / "templates"))
+
+_BLOCKED = ("error", "needs_data", "needs_mapping")
+
+
+def _status_counts(conn) -> dict[str, int]:
+    rows = conn.execute("SELECT status, COUNT(*) AS n FROM submissions GROUP BY status").fetchall()
+    return {r["status"]: int(r["n"]) for r in rows}
+
+
+def _worker_alive(hb) -> bool:
+    if hb is None or not hb["last_beat"]:
+        return False
+    try:
+        last = datetime.fromisoformat(hb["last_beat"])
+    except ValueError:
+        return False
+    age = (datetime.now(timezone.utc) - last).total_seconds()
+    return age <= get_settings().worker_heartbeat_stale_s
+
+
+@router.get("/", response_class=HTMLResponse)
+def dashboard(request: Request) -> HTMLResponse:
+    conn = get_connection()
+    try:
+        counts = _status_counts(conn)
+        hb = read_heartbeat(conn)
+        blocked = sum(counts.get(s, 0) for s in _BLOCKED)
+        ctx = {
+            "request": request,
+            "rar_env": get_settings().rar_env,
+            "version": __version__,
+            "counts": counts,
+            "blocked": blocked,
+            "worker_alive": _worker_alive(hb),
+            "last_login": hb["last_rar_login_ok"] if hb else None,
+        }
+        return templates.TemplateResponse("dashboard.html", ctx)
+    finally:
+        conn.close()
+
+
+@router.get("/_fragments/banner", response_class=HTMLResponse)
+def fragment_banner(request: Request) -> HTMLResponse:
+    conn = get_connection()
+    try:
+        counts = _status_counts(conn)
+        blocked = sum(counts.get(s, 0) for s in _BLOCKED)
+        return templates.TemplateResponse("_banner.html", {"request": request, "blocked": blocked})
+    finally:
+        conn.close()
+
+
+@router.get("/_fragments/submissions", response_class=HTMLResponse)
+def fragment_submissions(request: Request) -> HTMLResponse:
+    conn = get_connection()
+    try:
+        rows = conn.execute(
+            "SELECT id, status, id_prezentare, rar_status_code, rar_error, retry_count, updated_at "
+            "FROM submissions ORDER BY id DESC LIMIT 100"
+        ).fetchall()
+        return templates.TemplateResponse("_submissions.html", {"request": request, "rows": rows})
+    finally:
+        conn.close()