Initial commit of Descrybe v2 without local scratch artifacts.

Drop one-shot tmp/axe scripts and agent i18n scratch so the Gitea tree is deployable.

apps/api/sql/schema/042_user_session_version.sql

@@ -0,0 +1,9 @@
+-- +goose Up
+-- Cookie sessions (scs) store opaque token/blob rows with no user_id index.
+-- Bump session_version on password reset so RequireSession rejects stale cookies.
+
+ALTER TABLE users
+  ADD COLUMN IF NOT EXISTS session_version INT NOT NULL DEFAULT 0;
+
+-- +goose Down
+ALTER TABLE users DROP COLUMN IF EXISTS session_version;