perf: round 11 — StoragePath joined-only, classifier fusion, memoized bodies, query-shape pack, SPA fine-grained stars

Backend (each change benchmark-gated with BEFORE replicas + equivalence
gates; see examples/bench_round11_micro.rs, bench_round11_queries.rs,
bench_log_writer.rs and benches/ROUND11.md — final numbers land in the
follow-up doc commit):

- StoragePath re-representation: single canonical joined String, segments
  derived on demand; File/Folder drop the duplicated path_string field
  (4000→1000 allocs per 500-row listing page)
- Display classifier fusion: classify_display shares one stack-lowered
  extension across the three decision trees; call sites in FileDto,
  folder/favorites/recent handlers, trash, path-resolver (+ interning
  where Arc::from was still used)
- /status.php and /openapi.json memoized into OnceLock<Bytes> (openapi
  rebuilt a 171 KiB spec per request: 2.8 ms → 18 ns)
- NC upload-session PROPFIND: write! + pre-sized body + stack RFC2822
  dates (2.3-2.6x, 2582→772 allocs at 256 chunks)
- REST download: dead FileDto clone removed (capture mime/size + move)
- CalendarEventDto/TrashedItem into_parts moves (11 KiB ical_data memcpy
  gone per CalDAV row); CardDAV getlastmodified stack render
- 4xx path: borrowed ErrorResponse serialize, ErrorKind::as_str,
  not_found/already_exists clone kill
- vCard emit via write!; search page moved out with into_iter skip/take;
  content-hit UUIDs parsed once; group last-user check via HashSet
- RateLimiter: lock-free get + insert (and_upsert_with variant REJECTED
  by benchmark); CSRF token borrow-compare + borrowed cookie extraction
- Thumbnail/preview ETags built from as_str (Debug-identical bytes)
- Encrypted backend: encrypt_in_place_detached single-buffer write path,
  chunk-sized reserve in collect_stream; retry labels made lazy
- PG: deferred upload registration 3→1 round-trips (persist_file CTE
  template); direct_grant_cache for Calendar/AddressBook/Playlist authz
  (single-flight + set_role/clear_role invalidation); expand_user
  tokio::join!; geo clusters min(uuid)::text; recluster face assignment
  batched into one UNNEST update
- People recluster cosine: norms precomputed once (bit-identical gate)
- NC capabilities poll logs demoted to debug; tracing-appender dep added
  for the log-writer benchmark

Frontend:
- ResourceList.selectedEntries O(N)-per-toggle → id-index projection
  O(k log k); favorites/recent consume the batchToolbar snippet param and
  drop their duplicate filter + dead selectedIds mirror
- Recent: star state via new favoriteIds prop — a star click no longer
  rebuilds all N entries
- admin timeAgo >30d fallback uses the cached Intl.DateTimeFormat
- vitest gates in src/lib/components/round11.bench.test.ts

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01ABhTEHuGujvwoodh67Kga7

Cargo.toml

@@ -20,6 +20,10 @@ tower-http = { version = "0.6.11", features = ["fs", "compression-gzip", "compre
 flate2 = "1.1.9"
 tracing = "0.1.44"
 tracing-subscriber = { version = "0.3.23", features = ["env-filter"] }
+# Round-11: moves log formatting+write off the async workers. `lossy(false)`
+# so audit lines are never dropped (emitters block only when the 128k-line
+# channel is full — backpressure, not loss). See benches/ROUND11.md.
+tracing-appender = "0.2"
 chrono = { version = "0.4.45", features = ["serde"] }
 # RFC 5545 iCalendar parser + emitter.
 #
@@ -350,6 +354,34 @@ name = "bench_micro_allocs"
 path = "examples/bench_micro_allocs.rs"
 required-features = ["bench"]
 
+# Round-11 battery ────────────────────────────────────────────────────────────
+
+# Round-11 CPU/alloc micro-pack — download DTO hand-off, Last-Modified stack
+# render, status.php/openapi.json memoization, upload-session PROPFIND emit,
+# rate-limiter single-op, CSRF/ETag/recent-id micro-allocs, 4xx body, vCard
+# emit, search page move, cosine norms, encrypted write in-place, StoragePath
+# joined-only materialization. No Postgres.
+[[example]]
+name = "bench_round11_micro"
+path = "examples/bench_round11_micro.rs"
+required-features = ["bench"]
+
+# Round-11 query-shape pack — deferred-upload 3→1 CTE, Calendar/AddressBook/
+# Playlist direct-grant cache, expand_user join!, geo min-cast, recluster
+# UNNEST batch (needs the dev Postgres up).
+[[example]]
+name = "bench_round11_queries"
+path = "examples/bench_round11_queries.rs"
+required-features = ["bench"]
+
+# Round-11 log-writer benchmark — sync stdout fmt layer vs tracing-appender
+# non_blocking(lossy=false) under 4-worker emit contention, fast + slow
+# writer profiles. Run once per arm via BENCH_LOG_ARM. No Postgres.
+[[example]]
+name = "bench_log_writer"
+path = "examples/bench_log_writer.rs"
+required-features = ["bench"]
+
 # Round-10 battery ────────────────────────────────────────────────────────────
 
 # Round-10 CPU/alloc micro-pack — auth identity build, basic-auth hit,