feat: publication IA (magazine/brief/essay) + fixes critique

Publication IA:
- 4 templates (magazine, brief, essay, simple) avec CSS riche
- Rewrite IA (article/exercises/tutorial/reference/mixed)
- Modération avec timeout 12s + fallback safe
- Quotas publish_enhance par tier (basic=2, pro=15, business=100)
- Détection contenu stale (hash)
- Migration DB publishedContent/publishedTemplate/publishedSourceHash

Fixes:
- cheerio v1.2: Element -> AnyNode (domhandler), decodeEntities cast
- _isShared ajouté au type Note (champ virtuel serveur)
- callout colors PDF export: extraction fonction pure testable
- admin/published: guard note.userId null
- Cmd+S fonctionne en mode dialog (pas seulement fullPage)

i18n:
- 23 clés publish* traduites dans les 15 locales
- Extension Web Clipper: 13 locales mise à jour

Tests:
- callout-colors.test.ts (6 tests)
- note-visible-in-view.test.ts (5 tests)
- entitlements.test.ts + byok-entitlements.test.ts: mock usageLog + unstubAllEnvs
- 199/199 tests passent

Tracker: user-stories.md sync avec sprint-status.yaml

memento-note/lib/ai/tools/pptx.tool.ts

@@ -114,7 +114,7 @@ function addWatermark(slide: any) {
   })
 }
 
-/** Wrap pres.addSlide so every new slide gets the Momento watermark automatically */
+/** Wrap pres.addSlide so every new slide gets the Memento watermark automatically */
 function withWatermark(pres: PptxGenJSModule): PptxGenJSModule {
   const original = pres.addSlide.bind(pres)
   ;(pres as any).addSlide = (...args: any[]) => {
@@ -1004,7 +1004,7 @@ async function buildPresentation(spec: PresentationSpec): Promise<PptxGenJSModul
   const PptxGenJS = await getPptxGenClass()
   const pres = withWatermark(new PptxGenJS())
   pres.title = spec.title
-  pres.author = 'Momento'
+  pres.author = 'Memento'
   pres.subject = spec.title
   pres.layout = 'LAYOUT_16x9'