fix(design): claim audit part 1b — whole-row switches, the field-family edge, state-layer hovers, icon links, reason-disabled controls, 24/44 targets (E28)

- F12 (owner: A): SwitchRow, the whole settings row toggles; a Config boolean toggles from its title
  and hint (a label pointed at the switch).
- F14 (owner: B): the form dropdown trigger wears the field frame (see-through, the >= 3:1 edge);
  labelled pills keep the faint edge and the accent-edge hover. DESIGN says so, with log rows.
- F6: ~15 bg-card / bg-border / opacity hovers onto the B3 state layer; a lint rule (HOVER_SWAP)
  refuses the swap, contract-tested.
- F10: bare 14px icon links onto IconLink / LinkButton; a local lint rule refuses a glyph-only <a>.
- F13: reason-disabled controls are aria-disabled (Users, Channels backfill, Discovery, Scheduler
  runs, Config tests); FocusSafeButton now swallows the click of a caller's aria-disabled; the
  Config tests say why while dirty (testDirty, HU/EN).
- F5/F11: every control measured live at 24 (mouse) and 44 (coarse) across every page; touch-target
  is a utility that wins over a caller's min-h-6; link variants carry it too; SegmentedToggle,
  Tabs, NavRail, menu rows, PriorityStepper, sliders, CheckRow, InnerInput, card links and the rest.
- F9: DismissibleChip's label reaches the chip's 24; the Combobox chips are DismissibleChips.
- F15: the "+N" / "More..." open state worded as it renders.

frontend/src/components/Scheduler.dom.test.tsx

@@ -240,3 +240,21 @@ describe("Scheduler · the maintenance batch editor", () => {
     await waitFor(() => expect(batchBox()).toHaveProperty("value", "12000"));
   });
 });
+
+describe("Scheduler while paused (E28 audit F13)", () => {
+  // Unavailable WITH a reason ("resume first"): the runs stay in the tab order, so a keyboard user
+  // reaches the hint, and they are inert. Natively disabled, the reason was mouse-only.
+  it("keeps Run all and a job's Run focusable and inert", async () => {
+    const runAll = vi.spyOn(api, "runAllSchedulerJobs").mockResolvedValue({ started: [] });
+    const runOne = vi.spyOn(api, "runSchedulerJob").mockResolvedValue({ started: true } as never);
+    await mount(status({ paused: true }));
+    for (const name of ["scheduler.runAll", "scheduler.runNow"]) {
+      const btn = screen.getByRole("button", { name });
+      expect(btn.hasAttribute("disabled")).toBe(false);
+      expect(btn.getAttribute("aria-disabled")).toBe("true");
+      fireEvent.click(btn);
+    }
+    expect(runAll).not.toHaveBeenCalled();
+    expect(runOne).not.toHaveBeenCalled();
+  });
+});