max / makenotwork

Let the renderer write the site header, and delete the hand-written one `crate::shell::site_header` was 48 lines of markup in the assembly layer, reached by 55 templates through a partial and by ten described documents directly. It builds a `quasi_router::Chrome` now and `quasi_webview::chrome::header_html` writes it, which is one description and three renderers instead of one host's markup. The reason it could not be a `Chrome` before was `style.css`: the mobile menu is a checkbox styling its siblings, and the nav and the panel were emitted at two different points in the document. `Chrome::band` is one element and everything in the header is inside it, so `~` matches again. What changed for a reader, all of it deliberate: - The wordmark reads whole. The old one marked the dot `aria-hidden`, leaving the accessible name "Makenotwork", which is not what the site is called. `Brand` says the name and which run is the mark. - Log Out is a `Place` carrying a POST rather than a form with a hidden `_csrf`. The token rides on the header `htmx-glue.ts` attaches from the `csrf-token` meta, so there is no second copy to go stale against a token that rotates mid-session. `logout_handler` answers `HX-Redirect` for an htmx request, the way the 2FA verify handler already did. - The cart place is offered always and drawn when the cart holds something. `cart-badge.ts` finds it by `data-place="cart"` and writes `data-count`; the count is not a fact the server knows at render time, so it cannot be a fact the description carries. - The search box carries a real `<label>`, hidden, where the old one carried an `aria-label`. `.header-search input` restated four properties makeover already sets on `.field`, which `build.rs`'s drift check refuses. They are gone rather than renamed: the box is a described field now and the design system styles it.