[SandObserver]

Summary

• Add ui/js/page-zoom.js, a blocking classic script on both pages. It sets --inset-scale on the root to 1 / visualViewport.scale, read only when the layout width changes, so a pinch does not move the insets.
• Add --safe-top, --safe-right, --safe-bottom and --safe-left to tokens.css, each env(safe-area-inset-*) times --inset-scale.
• Use the tokens in place of every env(safe-area-inset-*) in the dashboard, Settings and config recovery stylesheets.

Testing
All green. Checked on an iPhone in Safari at 50% and 100% page zoom: the side insets measured 118 px and 59 px. Added tests for the scale at 50%, 100% and 150%, a pinch, a later zoom change, the load order, and that only the tokens read the insets.

Changelog

Fixed

• Keep the dashboard and Settings clear of the notch and status bar when Safari's page zoom is not 100%.

Checklist

• Stays within the project constraints: one container, no runtime dependencies, no build step (see CONTRIBUTING.md).
• Tests added or updated for new logic, and the full suite, lint, and typechecks pass.
• Docs updated if behavior or configuration changed.