R1 cleanup: collAnon and dead code gone, no IndexedDB, honest PWA files

Starts the completion program (SocialPub docs/ROADMAP.md, "Owner decisions on finishing everything", 2026-10-17).

- The localizer's namespace is decePubClient.Services; collAnon is gone from the repo.
- Dead code: PagesBase, VConstants, SettingsOptions, ViewLanguage, unused APIs routes, InstanceService.Self,
  RequestStats.LastOf/AverageMs, PostAnon/DeleteTotallyAnon, unused AppStatusService methods and their main.js helpers
  (the app badge stays for Web Push), ExtensionMethods/SUtility leftovers (Markdig and BlazorZXingJs packages go),
  unused PublicCacheData/PageSettings/AppConfiguration fields, commented-out code.
- The client log in IndexedDB, which nothing ever read, goes with the whole IndexedDB layer (DnetIndexedDb, IStorage):
  logs go to the browser console; main.js deletes the old "data" database once.
- The solution names the real ClientModels project. Unused vendor assets (fontawesome, solid, open-iconic, rxjs) go.
- robots.txt disallows everything; manifest.json and index.html say decePub; the service worker's cache name follows
  each publish's assets version, so old caches are purged.
- MessageType is Visibility (member names kept: they are resx keys); ExpandMessage.razor is Thread.razor (same route).
- i18n: dead keys removed, Italian "camera" is "punto di vista", DInputBase/DCalendar validation messages come from
  ErrorMessages, DataTransfer's spinner has its label.
- CLAUDE.md follows: client storage, JS interop, PWA, the D fields' messages.

Verified: dotnet build decePubClient.csproj and decePubClient.sln -c Release (0 errors, no new warnings); a Pasture
publish served by the pasture's decepub peer.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01WpVCoDeM1qUTRp4fXQdfof

Services/TokenAuthStateProvider.cs

@@ -15,7 +15,7 @@ namespace decePubClient.Services
 	/// The session (AuthData in localStorage, cached in memory) and the authentication state built from it. It only
 	/// stores and hands out tokens; signing in, exchanging and revoking them is AuthService's job.
 	/// </summary>
-	public class TokenAuthStateProvider(ILocalStorageService storage, IStorage dbStorage, ILogger<TokenAuthStateProvider> logger)
+	public class TokenAuthStateProvider(ILocalStorageService storage, ILogger<TokenAuthStateProvider> logger)
 		: AuthenticationStateProvider
 	{
 		/// <summary>The claim naming the persona the client acts as (an avatar id).</summary>
@@ -89,14 +89,12 @@ namespace decePubClient.Services
 			await Save(session, cancellationToken);
 		}
 
-		public async Task LogoutAsync(bool deleteDb = false, CancellationToken cancellationToken = default)
+		public async Task LogoutAsync(CancellationToken cancellationToken = default)
 		{
 			logger.LogInformation($"set null({nameof(LogoutAsync)})");
 			authData = null;
 			loaded = true;
 			await storage.RemoveItemAsync(nameof(AuthData), cancellationToken);
-			if (deleteDb)
-				await dbStorage.RemoveAll(includeClientLogs: true, cancellationToken: cancellationToken);
 
 			NotifyAuthenticationStateChanged(GetAuthenticationStateAsync());
 		}