feat(web): show reliable fulfillment evidence and refresh safely

[cb8010d6]

Product scope

Stacked on #41; user-facing completion of the read-evidence work for #25.

• Replace misleading original-demand delivery claims with material-group evidence only; no legacy numeric/status fallback, no cross-unit grand total, explicit unknown/error/loading states.
• Friendly verified material name/SKU/unit via existing backend relation queries (no extra calls); nullable unknown/foreign labels, technical IDs collapsed.
• Explain unreserved stock and unfinished work-order basis without ship/ETA promises; permission-aware existing-route links including wildcard semantics.
• Refresh actual order + availability + timeline after shipment/reversal/workflow success; no optimistic invented status. Route/company/user/context and unmount guards prevent late callbacks overwriting the active page. Same-user/company token rotation remains valid.
• Aggregate repeated product shipment request rows at four-decimal precision, matching fix(inventory): enforce transactional shipment quantity limits #40 and preserving actual line controls.
• Add3 strict synthetic Chromium cases for10/6/4 partial quantities, mobile post-callback rereads and failure removing stale good evidence; one-shot POST is fulfilled locally after exact payload assertion, never forwarded to backend.
• Add explicit iteration handoff and mark old PROJECT_GRAPH evidence as historical.

Review and local evidence

Luna max UI implementation; Astra medium dedicated asynchronous-page tests and independent review; Astra backend metadata and browser tests; root source review/integration.
UI branch138 tests passed; root combined dialogs+UI tree142 tests/26suites and typecheck passed. Reviewer30 focused tests including9 detail cases, lint/typecheck passed. Metadata 41 focused API tests passed.

Exact integrated-head CI evidence

Head 59accd4f14b9f65dff858fa78d1956633ac9cd9d: run 36254648498 is fully green, including the strict aggregate validate gate.

• 820 regular tests: 18 scripts + 660 API + 142 Web (actual job logs inspected).
• 77 real PostgreSQL regressions, including shipment safety and stock-accounting event identity.
• 13/13 stocked-trade HTTP acceptance steps against disposable real services.
• 9 actual Chromium tests; authentication/API fixtures are synthetic, including exact locally fulfilled shipment POST.
• Security audit, commitlint, typecheck/build/validation gates passed.
• Desktop partial-order, mobile refreshed-order and failed-refresh screenshots downloaded and visually inspected: readable material labels, responsive quantity layout, and no stale successful coverage after read failure.
• Browser report/screenshots artifact 10909469306 expires 2026-10-03. Graphify remains unavailable.

This supersedes the pre-CI checkpoint in the committed handoff document; no base-branch result is substituted for this head.

Safety boundary

Synthetic browser sessions do not validate production authentication, persistence or manual business acceptance. No automatic purchases/shipments, new workflow/finance policy, production migration/deployment, historical backfill or main merge. Retain #35 production image blocker, controlled old-consumer accounting cutover, original historical outbound attribution and real-business sign-off requirements.