feat(18-01): money list column, danger record actions, preview Edit rule and table kit (task 2)

- columns.yaml type: money with currency or currencyFrom (exactly one),
  never searchable, not sortable by default; every list row carries the
  currencyFrom column's value under its own key; the schema serves
  currency and currencyFrom on the column
- pact.AdminRecordAction.Danger, served as danger on cabana.RecordAction
  (absent when false); RecordActions.vue passes it to the confirm dialog
- CellValue money kind through formatMoney with the row's code, the em
  dash when empty and the amount alone without a code; DataTable aligns
  money headers and cells to the right
- PreviewView renders Edit only when a registered value field allows
  update (F6)
- main.css .summer-table* and .summer-stat__note kit classes (F7) over
  --c-* variables; cabana README kit rows
- fixture record actions void (danger) and resend; TestMoneyListCompile,
  TestMoneyListSmoke and TestRecordActionDangerSmoke; regenerated OpenAPI
  and TS types; rebuilt dist; lists-and-filters and admin-controllers docs

modules/pact/capabilities.go

@@ -327,14 +327,19 @@ type HasAdminBulkActions interface {
 // RequiredPermissions. Applies reports whether the action applies to the
 // record in its current state: a nil Applies means the action always applies.
 // Applies must be a pure read, because it also runs when a record is shown, to
-// decide which actions the admin is offered.
+// decide which actions the admin is offered. Danger only changes how the
+// admin asks for confirmation; permissions and Applies are unchanged.
 type AdminRecordAction struct {
 	Name        string
 	Label       string
 	Confirm     string
 	Permissions []string
-	Applies     func(ctx context.Context, record any) (bool, error)                                   `json:"-"`
-	Run         func(ctx context.Context, in AdminRecordActionInput) (AdminRecordActionResult, error) `json:"-"`
+	// Danger marks an action that moves money out or cannot be undone: the
+	// admin's confirm dialog then uses its danger variant (serialized as
+	// `danger` in the record response). The footer button itself is unchanged.
+	Danger  bool
+	Applies func(ctx context.Context, record any) (bool, error)                                   `json:"-"`
+	Run     func(ctx context.Context, in AdminRecordActionInput) (AdminRecordActionResult, error) `json:"-"`
 }
 
 // AdminRecordActionInput is what the framework hands an AdminRecordAction.