feat(workflows): batch enable toggles into the save queue, dither on truth

[ripgrim]

what

• the grid's enable/disable switches no longer write per flip. they bind through
  useSaveQueueField like the rules page, so a run of toggles collects into one
  batch that the unsaved-changes bar commits or discards. mounting the bar is
  also what arms the nav guard while dirty.
• enableMutation is gone entirely — the save-queue contract is explicit that a
  control keeping its own mutation splits the source of truth.
• commit fans out one write per flipped workflow. enabling runs the strict
  validator server-side and can refuse; those keys stay queued via failedKeys
  so the toggle holds intent on screen while the rest clear.
• the card dither now animates in and out, gated on workflow.enabled — the
  server's flag, never the queued toggle. texture on a card therefore always
  means the workflow is genuinely live. the old optimistic cache update is gone,
  it would have lied about exactly this.
• easing is a quantized ramp, seven discrete opacity levels, so the texture
  materialises in bands the way an ordered dither thresholds a gradient rather
  than a generic fade. opacity-only, so it survives reduced-motion as a
  crossfade, and initial={false} keeps already-live cards static on load.

ci was red on main

two of four ci steps fail on main as of #24. both fixed here:

• hasData lost its only consumer when the stat card stopped gating the chart
  on a non-empty series — failed noUnusedVariables and typecheck.
• customize-page was left unformatted — failed biome.

also excluded .turbo from biome: bun dev writes
.turbo/preferences/tui.json, gitignored but not biome-ignored, so
bun run check failed locally for anyone who had run the dev server. ci never
saw it on a fresh checkout.

still red, not from this branch

bun run typecheck fails on packages/utils/src/guarded-fetch.ts:335 —
Uint8Array<ArrayBufferLike> is not assignable to BlobPart under the web
workspace's lib settings. @tripwire/utils typechecks clean on its own; only
the web workspace trips it. untouched here and needs its own change — widening
the MultipartFile.bytes type ripples into the worker's economics digest and
the png encoder, which is not this pr's business.

checks

• biome: pass
• boundaries: pass
• build: pass
• tests: 846 pass, 1 pre-existing flaky db integration test
• typecheck: the guarded-fetch error above, pre-existing