Fix code-review findings across domain, persistence, server and frontend

Full-codebase review turned up five real correctness/security bugs and
a dozen smaller inconsistencies; all are fixed here with matching test
coverage:

- BMK uniqueness silently allowed German-umlaut duplicates ("Ä1" vs
  "ä1") because the DB's normalized index only folds ASCII case. Added
  a shared Unicode-aware pre-check used by every circuit/component
  insert and rename path (one of which had no pre-check at all).
- CircuitDeviceRow.simultaneityFactor had no upper bound at the row
  level (command model and snapshot/restore schema), unlike every
  sibling entity, letting a bad value silently corrupt power totals.
- Grid cell editing silently misread German thousands-separator input
  ("1.500" parsed as 1.5); "." is now rejected outright with a clear
  message instead of guessing.
- The editor's shared command runner (runCommand/applyHistory) had no
  re-entrancy guard, so a double click/drop could fire the same
  command twice and race a BMK collision or revision conflict. Added a
  synchronous ref guard plus isSaving on the buttons that lacked it.
- GET .../next-identifier leaked circuit-numbering state for sections
  in other projects (no ownership check, 400 instead of 404). Moved
  under /projects/:projectId and scoped it.

Also: added the missing circuits.section_id / circuit_device_rows.
circuit_id indexes (migration 0006), gave FormModal a focus trap /
Escape-to-close / focus restore and rebuilt ProjectSettingsModal on
top of it instead of duplicated markup, removed dead code (3 orphaned
domain model files, an unused persistence helper, a wrapper only used
by its own test), pointed the project page at GET /projects/:id
instead of listing+filtering client-side, closed the gap between the
documented 18 MB CSV limit and the ~17.17 MiB actually enforced, added
missing upper bounds on several free-text fields, filled in nine
missing German labels in the revision timeline, replaced a
key-order-fragile JSON.stringify equality check with a real field
comparison, made an implicit sort-order assumption in three
renumbering helpers explicit, cleared the sidebar's target selection
when it no longer resolves after a tree reload, and fixed
updateGlobalDevice to check-then-write instead of write-then-check.

Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>

src/frontend/utils/project-version-history.ts

@@ -47,10 +47,24 @@ const commandTypeLabels: Record<string, string> = {
   "circuit-group.delete-subtree": "Stromkreisgruppe vollständig entfernt",
   "circuit-group.restore-subtree": "Stromkreisgruppe vollständig wiederhergestellt",
   "project-floor.insert": "Geschoss angelegt",
+  "project-floor.update": "Geschoss bearbeitet",
   "project-floor.delete": "Geschoss entfernt",
   "project-room.insert": "Raum angelegt",
+  "project-room.update": "Raum bearbeitet",
   "project-room.delete": "Raum entfernt",
   "project.restore-state": "Projektstand wiederhergestellt",
+  "circuit-protection.update": "Stromkreisschutz bearbeitet",
+  "external-csv-configuration.update": "Revit-CSV-Konfiguration bearbeitet",
+  "external-import.apply-initial": "Revit-Erstimport übernommen",
+  "external-object.assign-to-new-circuit":
+    "Externes Objekt in neuen Stromkreis übernommen",
+  "external-object.unassign-and-delete-created-circuit":
+    "Externes Objekt aus erzeugtem Stromkreis gelöst",
+  "external-object.assign-to-new-row":
+    "Externes Objekt in neue Gerätezeile übernommen",
+  "external-object.unassign-and-delete-created-row":
+    "Externes Objekt aus erzeugter Gerätezeile gelöst",
+  "external-object.update-row-assignment": "Externe Objektzuordnung geändert",
 };
 
 export function getProjectRevisionSourceLabel(