feat: Bitwarden import bundle + settings search + quick-search hotkey + UX fixes

- Bitwarden CSV import: folders auto-created server-side; notes column on
  login rows surfaces as a "Notes" custom field instead of polluting tags;
  type=card / type=identity rows now mapped to kind=note with the
  credit-card / identity template + card_* / identity_* columns
  pulled into custom_fields; `fields` column parsed (Bitwarden's
  "label: value\nlabel: value" lines + our own JSON shape).
- Settings panel search: live filter at top of the panel, matches each
  .setting-row individually, hides whole section when no row matches,
  shows a "No matches" banner. Esc clears query (without closing
  Settings); Esc with empty query closes the panel.
- Quick-search hotkey customizable: SetQuickSearchHotkey added to
  PM.Bridge; cmd://autofill/hotkeys extended with qs_mods/qs_vk
  (independent of the autofill enabled flag — quick-search stays
  armed even when autofill is off); state.quickSearchHotkey synced
  via settings_json; new "Quick search picker" row in Settings.
- FireDAC SQLite folder POST/PUT: pre-declare ftString on color/icon
  params so .Clear (NULL) doesn't trip "[FireDAC][Phys][SQLite]-335
  type unknown" at Prepare — was crashing the CSV-import folder
  auto-creation path.
- Edge form-data autocomplete suppressed on slideover inputs (title,
  site, username, password, TOTP, note body, custom fields):
  autocomplete=off (new-password on secrets) + spellcheck=false. Fixes
  the "Informations enregistrées" dropdown popping over data after a
  field was edited.
- closeSlideOver blurs any focused descendant before removing .is-open
  so an invisible focused field can't react to arrow-down / backspace
  after dismissal.
- Slideover Esc handler upgraded to capture phase so it fires before
  the input's own keydown or browser-level Esc swallow on the active
  autocomplete popup.
- Settings panel Esc closes the panel when search input is empty;
  search keeps the keystroke when it has a query to clear.
- Discard-fantome on note open: customFields working copy and
  originalCustomJson now share the SAME normalized array — comparing
  raw plainCustom against the .map()'d working copy made notes look
  dirty on open.
- Delete / Backspace global shortcut: batch-trash on normal views,
  batch perm-delete on trash view, gated on selection + no input
  focused + no modal up.
- Toggle thumb vertical centering via top:50% + translateY(-50%);
  state checked uses translate(16px, -50%) to keep the centring.
- Batch bar disappears after per-card restore/perm-delete/trash:
  state.checked.delete(id) before render for the relevant flows;
  state.checked.clear() before render in emptyTrash and the new
  moveEntriesToFolder helper.

Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>

delphi-backend/Handlers/PM.Handler.Folders.pas

@@ -14,6 +14,7 @@ implementation
 uses
   System.SysUtils, System.JSON, System.NetEncoding,
   System.Generics.Collections,
+  Data.DB,
   FireDAC.Comp.Client, FireDAC.Stan.Param,
   IdCustomHTTPServer,
   PM.Router, PM.JSON, PM.Database, PM.Session, PM.Audit, PM.RateLimit;
@@ -111,6 +112,10 @@ begin
         'VALUES (:uid, :name, :color, :icon)';
       LQ.ParamByName('uid').AsInteger  := LUserId;
       LQ.ParamByName('name').AsString  := LName;
+      // Pre-declare type so .Clear (NULL) doesn't leave the param
+      // untyped — FireDAC SQLite rejects untyped params at Prepare.
+      LQ.ParamByName('color').DataType := ftString;
+      LQ.ParamByName('icon').DataType  := ftString;
       if LColor = '' then LQ.ParamByName('color').Clear
       else                LQ.ParamByName('color').AsString := LColor;
       if LIcon = '' then  LQ.ParamByName('icon').Clear
@@ -205,11 +210,13 @@ begin
       LQ.ParamByName('name').AsString := LName;
       if LHasColor then
       begin
+        LQ.ParamByName('color').DataType := ftString;
         if LColor = '' then LQ.ParamByName('color').Clear
         else                LQ.ParamByName('color').AsString := LColor;
       end;
       if LHasIcon then
       begin
+        LQ.ParamByName('icon').DataType := ftString;
         if LIcon = '' then LQ.ParamByName('icon').Clear
         else               LQ.ParamByName('icon').AsString := LIcon;
       end;