v1.20.2

Four things an iPhone shows that a desktop does not.

🐛 Fixed

Back and Open were three pixels apart. 36px against 33px reads as a
mistake rather than as a hierarchy. Both are 2.75rem now, the thumb target the
rest of the phone layout already uses, and the status pill below them goes
from 27px to 36px. The pill in a card foot keeps its size: that foot is dense,
and raising it there would push every card down.

48px of nothing between the header and the back link. The article's own
padding and the head's margin stacked, 22.4 and 25.6. The margin goes, and
29px is left.

✨ Changed

The category trail says which way it scrolls. Below the width where it
becomes one scrolling row, a chip cut exactly at the edge read as the last
one, which is how a reader misses two thirds of the categories. The side that
still has chips behind it fades now, both sides in the middle, neither when
the row fits.

Which side is measured from the chips' own rectangles rather than from
scrollLeft, whose sign in a right-to-left page is not the same in every
engine. With scripting off the row still scrolls, it just does not advertise
it.

🧹 Internal

Two browser checks added, 82 in total, both proved red by deleting what they
guard. Each also refuses to pass on a page where it would prove nothing: the
fade check fails outright if the row does not overflow at 390px, and its
negative fails if the row it is handed at 1000px does. Checked on WebKit as
well as Chromium, since the report came from an iPhone: mask-image needs no
prefix on either.

This release is one stylesheet and one script. No Go file changed between
1.20.1 and 1.20.2, so nothing the server decides, serves or validates is
different.

📦 Image

docker pull morgankryze/cairn:1.20.2   # or: ghcr.io/morgankryze/cairn:1.20.2

This release also moves 1.20, 1, stable and latest, on both registries.
Docker Hub gets the digest ghcr signed, copied rather than rebuilt, so the two
are the same object and cosign verify works on either. The chart is at
oci://ghcr.io/morgankryze/charts/cairn version 1.20.2, signed the same way:

cosign verify morgankryze/cairn:1.20.2 \
  --certificate-identity-regexp '^https://github.com/MorganKryze/cairn/' \
  --certificate-oidc-issuer https://token.actions.githubusercontent.com

Upgrading needs nothing: no config shape changed, and -check on 1.20.2 is
the same binary logic 1.20.1 shipped.