Fix migrations and deploy issues + errors + linting

- scan both pending/ and applied/ dirs so remote catch-up works
- fix remote 500s: run.php handles per-statement errors so VIEW rebuilds run after duplicate columns; replace mb_strimwidth with substr (no mbstring extension on server)
- add missing migration: 015_license_custom.sql (column existed in schema.sql but was never migrated)
- remote: fgetcsv enclosure single-char + AdminLogger permission-denied
guard + deploy always migrates
- fix admin-filters wrapping: restore flex-wrap, flex-basis on
inputs/selects, shrink-protect buttons
- fix phpstan: remove redundant ?? [] after isset guard in
ThesisEditController
- biome: exclude vendored min.js via includes patterns;
lint whole js dir; modernise beforeunload-guard.js

app/src/Database.php

@@ -1055,7 +1055,7 @@ class Database
 
             // Levenshtein distance ≤ 10 % of the longer string.
             // levenshtein() is limited to 255 chars; use substrings for safety.
-            $a = mb_substr($normNew,      0, 255);
+            $a = mb_substr($normNew, 0, 255);
             $b = mb_substr($normExisting, 0, 255);
             $dist      = levenshtein($a, $b);
             $threshold = (int)ceil($maxLen * 0.10);