feat: Phase 0 foundation — Job entity, expanded pipeline, AI service lockdown, DateApplied history

Unblocks the documented core workflow and closes the AI-service exposure,
without changing existing behaviour.

Job/JobApplication split (additive; see ADR-002):
- New Job entity (the opportunity) with owner-scoped query filter; nullable
  JobApplication.JobId FK. Nothing reads Job yet.
- Migration AddJobEntityAndProspectStages, hand-edited to drop reconciler-owned
  tables the scaffolder re-emitted; verified against the real dev DB.

Pipeline: 10 internal stages across three concerns kept separate —
PipelineStage (workflow) / PipelineGroup (UI: NotApplied/Active/Closed) /
PipelineCategory (analytics). Adds Saved/Interested/Preparing/Withdrawn;
keeps Waiting and Ghosted. Kanban shows 3 grouped columns; cards keep a stage
chip and full transitions; drag applies only safe transitions (never infers
Ghosted/Withdrawn).

DateApplied nullable + SavedAt. Cleared when leaving Applied so analytics stay
accurate; the discarded date is preserved as an AppliedDateCleared JobEvent.

AI service lockdown: no host port; private ai_internal network (backend is the
only other member); X-Ai-Service-Token required on all non-/health endpoints;
AI_SERVICE_TOKEN mandatory via compose. Verified backend-only against the live
stack.

Also carries two pre-existing working-tree files (views/ProfilePage.tsx,
views/CareerWorkspacePage.tsx) so the tree is clean for the branch integration.

Tests: +40 backend (247 total), +5 sidecar (16), +15 frontend.

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>

job-tracker-ui/src/i18n/translations.ts

@@ -123,12 +123,19 @@ export const translations = {
     addJobModalJobCreatedUploadFailed: "Job created, but file upload failed.",
     addJobModalJobCreatedFilesNotAttached: "Job created. Files could not be attached automatically.",
     addJobModalFailedAddJob: "Failed to add job.",
+    statusSaved: "Saved",
+    statusInterested: "Interested",
+    statusPreparing: "Preparing",
     statusApplied: "Applied",
     statusWaiting: "Waiting",
     statusInterview: "Interview",
     statusOffer: "Offer",
     statusRejected: "Rejected",
     statusGhosted: "Ghosted",
+    statusWithdrawn: "Withdrawn",
+    pipelineGroupNotApplied: "Not Applied",
+    pipelineGroupActive: "Active",
+    pipelineGroupClosed: "Closed",
     settingsTitle: "Settings",
     settingsSubtitle: "Preferences and admin tools.",
     settingsTabGeneral: "General",
@@ -479,8 +486,9 @@ export const translations = {
     adminUsersDeleteConfirmBody: "Delete this user?",
     adminUsersDeleteConfirmNamed: "Delete user {name}?",
     adminUsersPassword: "Password",
-    kanbanHint: "Drag cards between columns to update status.",
+    kanbanHint: "Drag cards between columns to move a job forward. Use the card menu to set an exact stage.",
     kanbanDropHere: "Drop here",
+    kanbanGroupOther: "Other",
     kanbanAppliedAgo: "Applied {days}d ago",
     kanbanFollowUpNow: "Follow up now",
     kanbanReplyDueIn: "Reply due in {days}d",
@@ -1185,12 +1193,19 @@ export const translations = {
     addJobModalJobCreatedUploadFailed: "Jobben ble opprettet, men filopplasting mislyktes.",
     addJobModalJobCreatedFilesNotAttached: "Jobben ble opprettet. Filene kunne ikke knyttes automatisk.",
     addJobModalFailedAddJob: "Kunne ikke legge til jobb.",
+    statusSaved: "Lagret",
+    statusInterested: "Interessert",
+    statusPreparing: "Forbereder",
     statusApplied: "Søkt",
     statusWaiting: "Venter",
     statusInterview: "Intervju",
     statusOffer: "Tilbud",
     statusRejected: "Avslått",
     statusGhosted: "Ghostet",
+    statusWithdrawn: "Trukket",
+    pipelineGroupNotApplied: "Ikke søkt",
+    pipelineGroupActive: "Aktive",
+    pipelineGroupClosed: "Avsluttet",
     settingsTitle: "Innstillinger",
     settingsSubtitle: "Preferanser og adminverktøy.",
     settingsTabGeneral: "Generelt",
@@ -1541,8 +1556,9 @@ export const translations = {
     adminUsersDeleteConfirmBody: "Slette denne brukeren?",
     adminUsersDeleteConfirmNamed: "Slette bruker {name}?",
     adminUsersPassword: "Passord",
-    kanbanHint: "Dra kort mellom kolonnene for å oppdatere status.",
+    kanbanHint: "Dra kort mellom kolonnene for å flytte en jobb videre. Bruk kortmenyen for å sette et eksakt trinn.",
     kanbanDropHere: "Slipp her",
+    kanbanGroupOther: "Andre",
     kanbanAppliedAgo: "Søkt for {days}d siden",
     kanbanFollowUpNow: "Følg opp nå",
     kanbanReplyDueIn: "Svar forfaller om {days}d",