House rules: numbers through one formatter, no made-up server errors, and the rules fail the build

- Every number shown on a page goes through NumbersExtensions: counts,
  percentages, the nerd readouts and the values written into a style.
- A failure the client builds itself (offline, timeout, retries run out, an
  answer it can't read) is a 400 that names its kind; only a server's own 5XX
  passes through.
- Login, sign-up, recovery and password confirmations leave autocomplete to
  the browser, so it can offer the saved login.
- The Daisy components start with empty lists and attributes, and a
  decorative image still renders alt="".
- Arasaka.HouseRules.Analyzers checks all of this in every build, together
  with PrivaPub.ClientModels.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01W4YtEJrgxG12Pc39Fai8Bd

Components/Settings/AccountEditor.razor

@@ -58,9 +58,9 @@
 			{
 				<EditForm Model="change" OnValidSubmit="ChangeEmail" class="flex flex-col gap-2" data-account-email-change>
 					<DataAnnotationsValidator />
-					<DInput TValue="string" Type="email" @bind-Value="change.Email" Immediate="true" autocomplete="email" inputmode="email" autocapitalize="none"
+					<DInput TValue="string" Type="email" @bind-Value="change.Email" Immediate="true" inputmode="email" autocapitalize="none"
 							spellcheck="false" placeholder="@Localizer["New email address"]" data-account-email-new />
-					<DInput TValue="string" Type="password" @bind-Value="change.Password" Immediate="true" autocomplete="current-password"
+					<DInput TValue="string" Type="password" @bind-Value="change.Password" Immediate="true"
 							placeholder="@Localizer["Current password"]" data-account-email-password />
 					<ErrorViewer />
 					<div class="flex flex-wrap justify-end gap-2 pointer-coarse:gap-2">
@@ -75,7 +75,7 @@
 			{
 				<EditForm Model="emailRemoval" OnValidSubmit="RemoveEmail" class="flex flex-col gap-2" data-account-email-remove>
 					<DataAnnotationsValidator />
-					<DInput TValue="string" Type="password" @bind-Value="emailRemoval.Password" Immediate="true" autocomplete="current-password"
+					<DInput TValue="string" Type="password" @bind-Value="emailRemoval.Password" Immediate="true"
 							placeholder="@Localizer["Current password"]" data-account-email-remove-password />
 					<ErrorViewer />
 					<div class="flex flex-wrap justify-end gap-2 pointer-coarse:gap-2">
@@ -107,7 +107,7 @@
 		<DataAnnotationsValidator />
 		<b class="text-sm">@Localizer["Change the password"]</b>
 		<p class="text-xs opacity-70">@Localizer["Every other device signed in to this login is signed out."]</p>
-		<DInput TValue="string" type="password" @bind-Value="password.OldPassword" Immediate="true" autocomplete="current-password"
+		<DInput TValue="string" type="password" @bind-Value="password.OldPassword" Immediate="true"
 				placeholder="@Localizer["Current password"]" data-account-current />
 		<div class="flex flex-wrap gap-2">
 			<DInput TValue="string" type="password" class="flex-1 min-w-40" @bind-Value="password.NewPassword" Immediate="true" autocomplete="new-password"
@@ -135,7 +135,7 @@
 		<DataAnnotationsValidator />
 		<b class="text-sm text-error">@Localizer["Delete this login"]</b>
 		<p class="text-sm">@Localizer["Every persona of this login goes with it, and everything public they had, here and on the servers that hold it. It cannot be undone."]</p>
-		<DInput TValue="string" type="password" @bind-Value="removal.Password" Immediate="true" autocomplete="current-password"
+		<DInput TValue="string" type="password" @bind-Value="removal.Password" Immediate="true"
 				placeholder="@Localizer["Current password"]" data-account-delete-password />
 		<DCheckbox @bind-Value="understood" Size="DSize.Sm" LabelText="@Localizer["I understand: delete this login and every persona of it"]" data-account-delete-understood />
 		<ErrorViewer />