Fix CSRF 403, improve registry UI, add phonetic IDs

- Fix CSRF token handling for production: generate tokens with HMAC,
  set cookie via afterware, inject into HTMX requests via JS
- Improve registry page: filter at top with better proportions,
  compact horizontal pill layout for facets
- Add phonetic ID encoding (e.g., "tobi-kafu-meli") for animal display
  instead of truncated ULIDs
- Remove "subadult" life stage (migration converts to juvenile)
- Change "Death (natural)" outcome label to just "Death"
- Show sex/life stage in animal picker alongside species/location

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>

spec.md

@@ -168,7 +168,7 @@ CREATE TABLE animal_registry (
   nickname TEXT,
   sex TEXT NOT NULL CHECK(sex IN ('male','female','unknown')),
   repro_status TEXT NOT NULL CHECK(repro_status IN ('intact','wether','spayed','unknown')),
-  life_stage TEXT NOT NULL CHECK(life_stage IN ('hatchling','juvenile','subadult','adult')),
+  life_stage TEXT NOT NULL CHECK(life_stage IN ('hatchling','juvenile','adult')),
   status TEXT NOT NULL CHECK(status IN ('alive','dead','harvested','sold','merged_into')),
   location_id TEXT NOT NULL REFERENCES locations(id),
   origin TEXT NOT NULL CHECK(origin IN ('hatched','purchased','rescued','unknown')),
@@ -193,7 +193,7 @@ CREATE TABLE live_animals_by_location (
   nickname TEXT,
   sex TEXT NOT NULL CHECK(sex IN ('male','female','unknown')),
   repro_status TEXT NOT NULL CHECK(repro_status IN ('intact','wether','spayed','unknown')),
-  life_stage TEXT NOT NULL CHECK(life_stage IN ('hatchling','juvenile','subadult','adult')),
+  life_stage TEXT NOT NULL CHECK(life_stage IN ('hatchling','juvenile','adult')),
   first_seen_utc INTEGER NOT NULL,
   last_move_utc INTEGER,
   tags TEXT NOT NULL CHECK(json_valid(tags))