Refine residual UI surfaces

[wellivea1]

What changed

• Reworked Data Sources into a source-first ruled workspace with a compact provenance ledger, truthful calendar/device status, dense input paths, and a ruled sleep log.
• Replaced Sharing's fake people, active states, avatar cards, and unused canvas with an explicit default-deny preview, relationship examples, link guardrails, and a private-data boundary.
• Replaced Android's generic rounded section Panel with ruled sections, retained 44/48 dp targets, tightened spacing, and fixed the 680 dp large-width content cap.
• Added screen tests, static UI regression guards, roadmap/verification evidence, and minimal audited transitive dependency updates.

Why

The remaining Data Sources, Sharing, and Android sections still contradicted the desktop design system through oversized card wrappers, weak hierarchy, and misleading placeholder states. This completes the documented U-F residual-surface slice without pretending deferred sharing transport or Android sync exists.

Validation

• Desktop frontend: 28 files / 200 tests
• Trusted-view prototype: 2 files / 6 tests
• Prettier, ESLint, UI standards guard, and both TypeScript checks
• Both Vite production builds and Wails ZeitBoard.exe build
• Android testDebugUnitTest lintDebug assembleDebug
• All Go modules, synthetic fixture drift, and contract validation
• Fresh npm ci and npm audit: 0 vulnerabilities
• Runtime review at 1280x720, 1440x900, and 390x844; Pixel 10 Pro XL API 36.1 portrait/landscape; no app console/runtime errors