Fix migrations and deploy issues + errors + linting

- scan both pending/ and applied/ dirs so remote catch-up works
- fix remote 500s: run.php handles per-statement errors so VIEW rebuilds run after duplicate columns; replace mb_strimwidth with substr (no mbstring extension on server)
- add missing migration: 015_license_custom.sql (column existed in schema.sql but was never migrated)
- remote: fgetcsv enclosure single-char + AdminLogger permission-denied
guard + deploy always migrates
- fix admin-filters wrapping: restore flex-wrap, flex-basis on
inputs/selects, shrink-protect buttons
- fix phpstan: remove redundant ?? [] after isset guard in
ThesisEditController
- biome: exclude vendored min.js via includes patterns;
lint whole js dir; modernise beforeunload-guard.js

justfile

@@ -38,7 +38,7 @@ logs:
 
 [group('deploy')]
 deploy:
-    # Main deploy (code + assets)
+    # Main deploy (code + assets) then run any pending DB migrations
     rsync -vur --progress --delete \
         --chown="www-data:xamxam" \
         --exclude 'vendor' \
@@ -61,10 +61,6 @@ deploy:
         --exclude 'var/logs/*' \
         app/ xamxam:/var/www/xamxam/
     ssh xamxam "mkdir -p /var/www/xamxam/var/{cache,logs,tmp}"
-
-[group('deploy')]
-deploy-migrate:
-    # Run pending DB migrations on the remote production database
     ssh xamxam "cd /var/www/xamxam && php migrations/run.php /var/www/xamxam/storage/xamxam.db"
 
 [group('deploy')]
@@ -96,7 +92,7 @@ test:
 
 [group('test')]
 lint-biome:
-    @biome lint app/public/assets/js/file-preview.js app/public/assets/js/file-upload-queue.js
+    @biome lint app/public/assets/js/
 
 [group('test')]
 phpstan: