Reintroduce TFE duration metadata: DB columns, form fields, controllers, views, and migration

Add 'unsafe-eval' to CSP script-src directives (htmx requires Function())

app/public/admin/fragments/file-browser.php

@@ -13,8 +13,6 @@ AdminAuth::requireLogin();
 
 $storageRoot = STORAGE_ROOT;
 
-error_log('[file-browser] ENTRY | dir=' . ($_GET['dir'] ?? '(root)') . ' | storageRoot=' . $storageRoot);
-
 // Determine which directory to browse
 $relDir = trim($_GET['dir'] ?? '', '/');
 if ($relDir !== '' && !preg_match('#^(tfe|these|frart|documents|theses)(/|$)#', $relDir)) {