fix(admin): scope remembered list state to the signed-in admin and recover from bad restored queries

- Store list queries under summer-admin.list:<admin id>:<controller>; me()
  and setCurrentUser set the owner, which removes other admins' keys and
  the unscoped keys of older builds; nothing is read or written without one
- clearUser removes every stored query, so logout, session expiry and an
  unrecoverable 401 (expireSession, now used by main.ts) all clear them
- A list request built from a restored query that fails for any reason
  (422, 500, network) forgets the query and loads the plain list once
- A failing URL query keeps the error and offers a reset button
  (backend::lang.list.reset_list, en and pl)
- Document remembered list state in docs/backend/lists-and-filters.md
- Rebuild modules/boardwalk/dist

admin/src/main.ts

@@ -4,7 +4,7 @@ import { createAdminRouter } from './app/router'
 import { onUnauthorized } from './api/client'
 import { loadStrings } from './app/i18n'
 import { applyColorScheme } from './app/theme'
-import { clearUser, me } from './state/useAuth'
+import { expireSession, me } from './state/useAuth'
 import { loadNavigation } from './state/useNavigation'
 import { loadSettings } from './state/useSettings'
 import './styles/main.css'
@@ -22,13 +22,9 @@ async function boot(): Promise<void> {
     await Promise.all([loadNavigation().catch(() => []), loadSettings().catch(() => [])])
   }
   const router = createAdminRouter()
-  onUnauthorized(() => {
-    clearUser()
-    const current = router.currentRoute.value
-    if (current.name !== 'login') {
-      void router.push({ name: 'login', query: { redirect: current.fullPath } })
-    }
-  })
+  // A session that cannot be recovered ends here: the profile and every
+  // stored list query are cleared before the login screen shows (T-16.1-03).
+  onUnauthorized(() => expireSession(router))
   const app = createApp(App)
   app.use(router)
   await router.isReady()