Implement share viewer (task 31)

- Makes actorId nullable in activity_log (migration 0010) with onDelete:
  set null so audit history survives user deletion; adds logShareActivity
  for anonymous mutations
- Adds resolveShareToken return of householdId for downstream validation
- Adds renderSharedView to EntityTypeRegistration; each module implements
  loadForShare (no-session bare queries) and renderSharedView
- Calendar: CalendarSharedView (upcoming 90-day events) and
  EventSharedView (title/time/location/notes)
- Lists: ListSharedView (client component with optimistic toggles via
  toggleShareListItem server action in lists/server/share-actions.ts)
- Notes: NoteSharedView (title + body + updated date)
- /app/s/[token]/page.tsx: resolves token, dispatches to loadForShare +
  renderSharedView, friendly error for invalid/expired tokens, noindex
- Middleware /s/* exemption confirmed present (no change needed)

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

src/modules/notes/server/share-queries.ts

@@ -0,0 +1,35 @@
+import { eq } from "drizzle-orm";
+import { db } from "@/lib/db";
+import { notes } from "../schema";
+
+export type NoteShareData = {
+  id: string;
+  title: string;
+  body: string;
+  pinned: boolean;
+  updatedAt: string;
+};
+
+export async function loadNoteForShare(id: string): Promise<NoteShareData | null> {
+  const [note] = await db
+    .select({
+      id: notes.id,
+      title: notes.title,
+      body: notes.body,
+      pinned: notes.pinned,
+      updatedAt: notes.updatedAt,
+    })
+    .from(notes)
+    .where(eq(notes.id, id))
+    .limit(1);
+
+  if (!note) return null;
+
+  return {
+    id: note.id,
+    title: note.title,
+    body: note.body,
+    pinned: note.pinned,
+    updatedAt: note.updatedAt.toISOString(),
+  };
+}