v0.9.3 - iOS PWA safe-area fix

What's Changed

• Fixed iOS standalone/PWA safe-area handling so the authenticated app header and mobile drawer render below the Dynamic Island/status area.
• Added a focused regression test covering the app shell and mobile drawer safe-area hosts.
• Bumped the default app image tag in compose.yml to 0.9.3.

Validation

• Reproduced the bug on iPhone before the fix and verified the PR fixed it in iOS standalone/PWA mode.
• npm run test -w apps/web -- lib/safe-area.test.ts