feat: закрыть остаточный backlog

- keyset-пагинация аудита с курсором (occurred_at, id) и UI «Показать ещё»
- пакетный /api/v1/labs/details и переход progress на один запрос
- абсолютный потолок сессии 30 дней (identity V12 + web), очистка refresh
- админская инвентаризация legacy-активов (/admin/legacy-assets, скрипт)
- E2E в Chromium/Firefox/WebKit (18/18), CI preflight
- LDD: 51 claim, 346 тестов, docs и handoff обновлены

scripts/ldd-migration-upgrade.sh

@@ -103,6 +103,8 @@ log "Применяю миграции ветки..."
     cat services/identity-service/src/main/resources/db/migration/V9__account_statuses.sql
     cat services/identity-service/src/main/resources/db/migration/V10__audit_events.sql
     cat services/identity-service/src/main/resources/db/migration/V11__refresh_tokens.sql
+    cat services/identity-service/src/main/resources/db/migration/V12__refresh_absolute.sql
+    cat services/identity-service/src/main/resources/db/migration/V13__audit_keyset_indexes.sql
     echo 'SET search_path TO academic;'
     cat services/academic-service/src/main/resources/db/migration/V6__courses.sql
     cat services/academic-service/src/main/resources/db/migration/V7__labs_course.sql
@@ -122,6 +124,10 @@ SELECT 'audit_events=' || count(*) FROM information_schema.tables
  WHERE table_schema='identity' AND table_name='audit_events';
 SELECT 'refresh_tokens=' || count(*) FROM information_schema.tables
  WHERE table_schema='identity' AND table_name='refresh_tokens';
+SELECT 'refresh_absolute=' || count(*) FROM information_schema.columns
+ WHERE table_schema='identity' AND table_name='refresh_tokens' AND column_name='absolute_expires_at';
+SELECT 'audit_keyset_idx=' || count(*) FROM pg_indexes
+ WHERE schemaname='identity' AND indexname='audit_events_occurred_id_idx';
 SELECT 'students=' || count(*) FROM students;
 SELECT 'groups=' || count(*) FROM groups;
 SELECT 'history=' || count(*) FROM membership_history;
@@ -163,6 +169,8 @@ out, result, v13 = sys.argv[1], sys.argv[2], sys.argv[3]
 required = {
     "audit_events=1",
     "refresh_tokens=1",
+    "refresh_absolute=1",
+    "audit_keyset_idx=1",
     "students=1",
     "groups=1",
     "history=1",