Fix what the review of search and the away summary found

[danielehrhardt]

Follow-up to #68 (search) and #69 (while you were away), fixing every finding of their review.

Search: major

• Matches by content disappeared while typing. cmdk stores an item's keywords only when its value changes, so automations, tickets and core-found chats lost their match after the next keystroke. Those items are now keyed by the search, so they register again (${id}:${q}).
• The core's chat results replaced the local ones. Local title/preview matches and the core's message matches now show together, de-duplicated. The core matches each word (AND) instead of the whole phrase.

Search: minor

• keepPreviousData results from an earlier query are never shown for the new one (isPlaceholderData, and deferred === q).
• Unique cmdk values (text + U+2063 + id, never searched), so same-named automations, agents, chats or waiting items no longer highlight together or freeze ArrowDown.
• #12 sorts by number, so Import passwords from Chrome, 1Password and other password managers #12 comes before #120.
• wordFilter folds accents and case for every script (NFKD; "cafe" finds "Café", "istanbul" finds "İstanbul"). Words in Chinese, Japanese, Korean and Thai match anywhere.
• The core search starts at 3 characters, after 250 ms.

While you were away: major

• It never ended. The desktop now stores { since, until } (until = the moment you came back), the API takes until, and every query is bounded by it. The header shows the time away, not the time since.
• It read the whole runs table. Migration 58 adds idx_runs_finished (partial) and task_events(kind, created_at). The query keeps SQLite on that index (+r.status), and a test asserts the plan uses it. Counts are done in SQL, highlight candidates are limited to 300, and the window is capped at 31 days.

While you were away: minor

• It triggers on pointerup / keyup, so the card can't appear mid-click.
• "Replied" and "problem" lines only for chats still unread; one read on the phone or in another window isn't news.
• The total cost is the sum of the per-agent costs.
• Automations are de-duplicated by id, and a delivery names who delivered it.

Checks:

• Core: full suite 1418 pass, 0 fail. away.test.ts now also covers the end of the window, unread-only chats, the index in the query plan and until validation.
• Typecheck: desktop.
• Browser: "Daily digest" (found through its prompt "check stripe payouts") stays from "s" to "st" to "stripe". "nice meet" finds chats whose messages say "nice to meet".