fix(19): satisfy CI fast-checks + secret scan

Lint (eslint --max-warnings 0):
- index.ts: disable no-unsafe-argument on the type-only Context mismatch when
  delegating to the OIDC handler inside the local-session skip wrapper
- localAuth.ts: handleLogout is sync (no await) — drop async (require-await)
- devBypass.ts: disable detect-possible-timing-attacks on the public well-known
  dev-placeholder string compare (not a secret comparison)
- remove dead code / unused bindings flagged by no-unused-vars: makeTestApp
  (localSession.test), makeUnauthContext + BrowserContext import (login.spec),
  unused memberId (admin.test), unused txSelectCount counter (me.test)
- localAuthMiddleware.test / me.test: fix unused + reflow-detached
  eslint-disable directives

Format: prettier --write across the 20 Phase-19 files that were never formatted.

Secret scan (gitleaks): allowlist two false positives — the synthetic >=32-char
TEST_SECRET in localSession.test.ts, and .planning/ design prose (a generic-api-key
regex hit on "credential atomically, 409-equivalent"). Neither is a real secret.

Verified locally: format:check, lint, typecheck, md:lint, gitleaks (no leaks),
PWA 266/266, API 452/452.

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

apps/pwa/src/styles/tokens.css

@@ -94,11 +94,11 @@
    * never the BrandSlot component structure (see 19-UI-SPEC.md §Brand Slot).
    * ───────────────────────────────────────────────────────────────────────── */
 
-  --brand-logo-bg: var(--color-member-0);       /* placeholder circle background */
-  --brand-logo-text: #ffffff;                   /* placeholder initials color */
-  --brand-logo-size: 48px;                      /* reserved slot height; keep 1:1 aspect */
-  --brand-logo-border-radius: 50%;              /* circle for initials; Phase 17 may change */
-  --brand-app-name: 'FamilySync';              /* drives doc only — not used as CSS content */
+  --brand-logo-bg: var(--color-member-0); /* placeholder circle background */
+  --brand-logo-text: #ffffff; /* placeholder initials color */
+  --brand-logo-size: 48px; /* reserved slot height; keep 1:1 aspect */
+  --brand-logo-border-radius: 50%; /* circle for initials; Phase 17 may change */
+  --brand-app-name: 'FamilySync'; /* drives doc only — not used as CSS content */
 
   /* ─────────────────────────────────────────────────────────────────────────
    * BREAKPOINTS (reference; use in @media queries)