Merge upstream/main into feat/external-file-mounts

Resolve conflicts between the external-file-mounts feature and upstream's
D5/D7 refactor (per-file provenance, keyset pagination, cross-drive move
gates, resource-access hook, folder-cascade lifecycle hook).

Key resolutions:
- FolderService::new now takes (repo, authz, file_lifecycle, mount_router);
  all callers + DI updated.
- FileRetrievalService / FileManagementService keep both the mount_router
  and the new resource_access_hook / drive_repo / storage_usage wiring.
- list_files_batch_with_perms: adapt the mount branch from offset- to
  keyset (after_name) pagination, mirroring paginate_mount_entries.
- download_file_impl: keep upstream's &HeaderMap + `impl IntoResponse + use<>`
  signature, retain the mount-download branch.
- Mount DTOs: the retired `owner_id` field maps onto created_by/updated_by
  (the mount owner) — the fields the frontend now uses for owner display.
- admin/+page.svelte: keep upstream's user-delete modal + the 'mounts' tab.
- Bump memmap2 0.9.10 -> 0.9.11 (RUSTSEC critical advisory fix) and
  regenerate Cargo.lock against the merged Cargo.toml.

src/application/services/mount_dto.rs

@@ -58,7 +58,6 @@ pub fn mount_folder_dto(cfg: &MountConfig, parent_id: &str, stat: &MountStat) ->
         name: node_name(stat.node_id.as_str()).to_owned(),
         path: String::new(),
         parent_id: Some(parent_id.to_owned()),
-        owner_id: Some(cfg.owner_id.to_string()),
         drive_id: cfg.drive_id,
         created_at: stat.created_at,
         modified_at: stat.modified_at,
@@ -66,8 +65,8 @@ pub fn mount_folder_dto(cfg: &MountConfig, parent_id: &str, stat: &MountStat) ->
         icon_class: Arc::from("fas fa-folder"),
         icon_special_class: Arc::from("folder-icon"),
         category: Arc::from("Folder"),
-        created_by: None,
-        updated_by: None,
+        created_by: Some(cfg.owner_id),
+        updated_by: Some(cfg.owner_id),
     }
 }
 
@@ -80,7 +79,6 @@ pub fn mount_entry_folder_dto(cfg: &MountConfig, parent_id: &str, entry: &MountE
         name: entry.name.clone(),
         path: String::new(),
         parent_id: Some(parent_id.to_owned()),
-        owner_id: Some(cfg.owner_id.to_string()),
         drive_id: cfg.drive_id,
         created_at: entry.created_at,
         modified_at: entry.modified_at,
@@ -88,8 +86,8 @@ pub fn mount_entry_folder_dto(cfg: &MountConfig, parent_id: &str, entry: &MountE
         icon_class: Arc::from("fas fa-folder"),
         icon_special_class: Arc::from("folder-icon"),
         category: Arc::from("Folder"),
-        created_by: None,
-        updated_by: None,
+        created_by: Some(cfg.owner_id),
+        updated_by: Some(cfg.owner_id),
     }
 }
 
@@ -112,12 +110,11 @@ pub fn mount_entry_file_dto(cfg: &MountConfig, parent_id: &str, entry: &MountEnt
         icon_special_class: Arc::from(icon_special_class_for(name, &mime)),
         category: Arc::from(category_for(name, &mime)),
         size_formatted: format_file_size(entry.size),
-        owner_id: Some(cfg.owner_id.to_string()),
         sort_date: None,
         content_hash: String::new(),
         etag: virtual_file_etag(entry.size, entry.modified_at),
-        created_by: None,
-        updated_by: None,
+        created_by: Some(cfg.owner_id),
+        updated_by: Some(cfg.owner_id),
     }
 }
 
@@ -139,11 +136,10 @@ pub fn mount_file_dto(cfg: &MountConfig, parent_id: &str, stat: &MountStat) -> F
         icon_special_class: Arc::from(icon_special_class_for(name, mime)),
         category: Arc::from(category_for(name, mime)),
         size_formatted: format_file_size(stat.size),
-        owner_id: Some(cfg.owner_id.to_string()),
         sort_date: None,
         content_hash: String::new(),
         etag: virtual_file_etag(stat.size, stat.modified_at),
-        created_by: None,
-        updated_by: None,
+        created_by: Some(cfg.owner_id),
+        updated_by: Some(cfg.owner_id),
     }
 }