fix(design): claim audit part 1b — whole-row switches, the field-family edge, state-layer hovers, icon links, reason-disabled controls, 24/44 targets (E28)

- F12 (owner: A): SwitchRow, the whole settings row toggles; a Config boolean toggles from its title
  and hint (a label pointed at the switch).
- F14 (owner: B): the form dropdown trigger wears the field frame (see-through, the >= 3:1 edge);
  labelled pills keep the faint edge and the accent-edge hover. DESIGN says so, with log rows.
- F6: ~15 bg-card / bg-border / opacity hovers onto the B3 state layer; a lint rule (HOVER_SWAP)
  refuses the swap, contract-tested.
- F10: bare 14px icon links onto IconLink / LinkButton; a local lint rule refuses a glyph-only <a>.
- F13: reason-disabled controls are aria-disabled (Users, Channels backfill, Discovery, Scheduler
  runs, Config tests); FocusSafeButton now swallows the click of a caller's aria-disabled; the
  Config tests say why while dirty (testDirty, HU/EN).
- F5/F11: every control measured live at 24 (mouse) and 44 (coarse) across every page; touch-target
  is a utility that wins over a caller's min-h-6; link variants carry it too; SegmentedToggle,
  Tabs, NavRail, menu rows, PriorityStepper, sliders, CheckRow, InnerInput, card links and the rest.
- F9: DismissibleChip's label reaches the chip's 24; the Combobox chips are DismissibleChips.
- F15: the "+N" / "More..." open state worded as it renders.

frontend/src/components/ui/FocusSafeButton.tsx

@@ -38,8 +38,9 @@ export const FocusSafeButton = forwardRef<
   const focused =
     focusEvent || (!!node.current && node.current.ownerDocument.activeElement === node.current);
   const soft = busy || (!!disabled && focused);
-  // A caller's own aria-disabled is the "unavailable, and here is why" state (the tooltip or label
-  // carries the reason, so the button stays focusable): it is kept, never overwritten by ours.
+  // A caller's own aria-disabled is the "unavailable, and here is why" state (DESIGN.md: the tooltip or
+  // label carries the reason, so the button stays focusable): it is kept, never overwritten by ours, and
+  // it is inert to a click like ours, so no caller has to guard its own handler.
   const callerSoft = rest["aria-disabled"] === true || rest["aria-disabled"] === "true";
   return (
     <button
@@ -50,7 +51,7 @@ export const FocusSafeButton = forwardRef<
       aria-disabled={soft || callerSoft || undefined}
       aria-busy={busy || undefined}
       onClick={(e) => {
-        if (soft) {
+        if (soft || callerSoft) {
           e.preventDefault();
           return;
         }