Searchable pickers (#534), event-script name picker fix, presentation mode

[nicdavidson]

Closes #534. Supersedes #533 (presentation mode), which is included here.

The branch starts from the current main (1a8d68b3, #535 Docker trial). This diff against develop therefore also contains #535's commits, because develop has not been updated since 9/24.

Searchable pickers (#534)

• Shared df-select-search + dfSearch pipe. A search box at the top of a single-select mat-select panel.
  • Arrow keys and Enter select; Esc clears the search, then closes.
  • Text typed on a closed or still-opening select goes to the search box instead of mat-select's jump-to-option type-ahead.
• Role-Based Access
  • The Service picker is searchable.
  • The Component picker has a Type dropdown, built from each component's first path segment (Schema / Table / Function / Procedure, and admin, role, … for system and file services), plus search.
  • Within a type, only that type's own wildcards (_table/, _table/*) stay visible. '' and * appear under All.
• Users / Admins: the app and role autocompletes now narrow as you type. They filter on the typed text, because requireSelection keeps that text out of the form control until an option is picked.
• Event Scripts: the service, script type, method and table pickers are searchable.
• API Docs
  • Operation nav search.
  • The {table} / {field} / relation / proc / func path-token pickers are now searchable mat-selects.
  • The filter-builder Field picker and Try-it's "Test as" picker are searchable.
• No payload change. Saved roles and apps are identical.

Event Scripts fix (broken on main today)

/system/event is exempt from the case interceptor (7f0747ba), so event parameters arrive as table_name / procedure_name / function_name. The component only matched the camelCase keys, so the Table / Procedure / Function Name picker never appeared, and you could not script a single table (e.g. a pre_process on driver).

• Both key spellings are now accepted.
• When a service has none (the API sends parameter: null), the picker is derived from the {…_name} placeholder and still shown. A typed name can be used, so you can script ahead of creating the function.

Presentation mode (from #533)

• Mask API keys and tokens for screensharing (df-secret, top-bar toggle).
• Fix: unmasked keys in the API Keys table were wrapping one character per line. They now show on one line, ellipsized at 180px.

Testing

• npm run test -- -c jest.config.ci.js: 34 suites / 292 tests pass. New specs:
  • df-select-search.spec.ts
  • scriptEventParameter cases in df-script-details.submit.spec.ts
• Browser-checked against a live 7.x instance (df-dev) with Playwright:
  • Role component picker: Table + "invoice" → _table/chinook_invoice/.
  • Users app and role pickers.
  • Event Scripts: logistics → _table.{table_name} → get.pre_process → driver. Also functions with none defined.
  • API Docs token, Field and "Test as" pickers.
  • API Keys table with presentation mode on and off.
• The remaining non-CI Jest failures (roles, filter-builder, try-it) also fail on clean main. They are the known transloco ESM issue noted in jest.config.ci.js.

Follow-up

• Role-Based Access: replace the rule table with a summary list + drawer editor #536: replace the Role-Based Access rule table with a summary list + drawer editor.