agent: lumotia — v0.1 release-completion run

Closes the code-side v0.1 ship gate. All quality gates green:
cargo fmt/clippy/test (~327 tests), npm check (0/0), vitest 13/13,
scripts/dogfood-rebrand-drill.sh 8/8.

Phase F — first-run onboarding promoted to v0.1
- FirstRunPage with skip-to-main + failure recovery + event recording
- Six onboarding commands (record/list/has-completed + lumotia_events)
- Storage migration v17 (onboarding_events + lumotia_events tables)

UI hardening (in-scope items from v0.1-ui-hardening.md)
- StatusPill + PostCaptureCard components, 21st preview entry
- Sidebar recording-as-sacred-state (opacity + aria-disabled, reduced-motion)
- Settings 6-section regroup + Help section + Activation log + Privacy toggle
- Error-state copy sweep (DictationPage + SettingsPage, plain-language)
- Global :focus-visible rule, textarea outlines restored
- Ctrl+K / Ctrl+, / Escape bindings in +layout

LLM resilience
- rule_based_extract_tasks (regex-free imperative-verb extractor) +
  extract_tasks_with_fallback wrapper — task extraction never returns zero
- tokio::time::timeout(120s) wraps cleanup/tags/tasks commands

Release artefacts
- LICENSE (canonical AGPL-3.0), CHANGELOG (Keep-a-Changelog format)
- v0.1-release-notes, privacy-and-ai-use, install-warnings,
  tester-onboarding-kit, tester-acceptance-runbook, code-signing-setup,
  apple-silicon-rb08-runbook, virtual-audio-setup, v0.1-contrast-audit
- Workspace versioning + AGPL spdx; npm exact-pin (10 ranges removed)
- AppImage SHA-256 sidecar in build.yml
- README v0.1 section + Reporting-issues; canonical repo slug

Closure pass — items moved from human-required to code-complete
- KI-02 Linux idle inhibit: zbus 5 → org.freedesktop.login1.Manager.Inhibit
- KI-03 Windows sleep prevention: SetThreadExecutionState(ES_CONTINUOUS|...)
- acquire/release_idle_inhibit Tauri commands, wired in DictationPage
- Diagnostic-bundle frontend wire-up (Settings → Help button)
- WCAG-AA contrast fix via .btn-filled-text utility (no token changes)
- 8 destructive-action sites wrapped in plain-language confirm() guards
- KNOWN-ISSUES.md + v0.1-known-limitations.md updated (KI-02/03 fixed)

Scripts
- pre-tag-verify.sh, tag-day.sh, smoke-linux + driver
- parse-diagnostic-bundle.sh, parse-activation-log.py

Per-item audit trail: docs/release/v0.1-completion-status.md
Remaining: W-01…W-08 (signing certs, hardware probes, smoke matrix,
tester recruitment) — see docs/release/v0.1-known-limitations.md.

crates/storage/src/migrations.rs

@@ -507,6 +507,32 @@ const MIGRATIONS: &[(i64, &str, &str)] = &[
             ON transcripts(deleted_at) WHERE deleted_at IS NOT NULL;
         "#,
     ),
+    (
+        17,
+        "onboarding_events + lumotia_events tables",
+        r#"
+        -- onboarding_events: gates first-run, supplies time-to-first-capture metric
+        CREATE TABLE IF NOT EXISTS onboarding_events (
+            id INTEGER PRIMARY KEY AUTOINCREMENT,
+            event TEXT NOT NULL,
+            completed_at INTEGER NOT NULL,
+            version TEXT NOT NULL,
+            skipped INTEGER NOT NULL DEFAULT 0,
+            notes TEXT
+        );
+        CREATE INDEX IF NOT EXISTS idx_onboarding_events_event ON onboarding_events(event);
+
+        -- lumotia_events: opt-in local activation log
+        CREATE TABLE IF NOT EXISTS lumotia_events (
+            id INTEGER PRIMARY KEY AUTOINCREMENT,
+            kind TEXT NOT NULL,
+            occurred_at INTEGER NOT NULL,
+            payload TEXT
+        );
+        CREATE INDEX IF NOT EXISTS idx_lumotia_events_kind ON lumotia_events(kind);
+        CREATE INDEX IF NOT EXISTS idx_lumotia_events_occurred ON lumotia_events(occurred_at);
+        "#,
+    ),
 ];
 
 /// Split SQL into individual statements, respecting BEGIN...END trigger blocks.
@@ -681,7 +707,7 @@ mod tests {
             .fetch_one(&pool)
             .await
             .unwrap();
-        assert_eq!(count, 16);
+        assert_eq!(count, 17);
 
         sqlx::query("INSERT INTO settings (key, value) VALUES ('test', 'value')")
             .execute(&pool)
@@ -700,7 +726,7 @@ mod tests {
             .fetch_one(&pool)
             .await
             .unwrap();
-        assert_eq!(count, 16);
+        assert_eq!(count, 17);
     }
 
     #[tokio::test]
@@ -1239,6 +1265,77 @@ mod tests {
         );
     }
 
+    #[tokio::test]
+    async fn migration_v17_creates_onboarding_and_lumotia_events_tables() {
+        // v0.1 onboarding-event tracking and opt-in local activation log.
+        // Verify both tables exist with the expected columns after running
+        // all migrations. Uses PRAGMA table_info to inspect column presence.
+        let pool = fk_test_pool().await;
+        run_migrations(&pool).await.expect("migrate");
+
+        // --- onboarding_events ---
+        let info = sqlx::query("PRAGMA table_info(onboarding_events)")
+            .fetch_all(&pool)
+            .await
+            .expect("pragma onboarding_events");
+        assert!(
+            !info.is_empty(),
+            "onboarding_events table must exist after v17"
+        );
+        let names: Vec<String> = info.iter().map(|r| r.get::<String, _>("name")).collect();
+        for col in ["id", "event", "completed_at", "version", "skipped", "notes"] {
+            assert!(
+                names.contains(&col.to_string()),
+                "onboarding_events must have column {col}; got {names:?}"
+            );
+        }
+
+        // Index on onboarding_events(event) must exist.
+        let idx_names: Vec<String> = sqlx::query_scalar(
+            "SELECT name FROM sqlite_master \
+             WHERE type = 'index' AND tbl_name = 'onboarding_events'",
+        )
+        .fetch_all(&pool)
+        .await
+        .expect("read onboarding_events indexes");
+        assert!(
+            idx_names.iter().any(|n| n == "idx_onboarding_events_event"),
+            "expected idx_onboarding_events_event, got {idx_names:?}",
+        );
+
+        // --- lumotia_events ---
+        let info2 = sqlx::query("PRAGMA table_info(lumotia_events)")
+            .fetch_all(&pool)
+            .await
+            .expect("pragma lumotia_events");
+        assert!(
+            !info2.is_empty(),
+            "lumotia_events table must exist after v17"
+        );
+        let names2: Vec<String> = info2.iter().map(|r| r.get::<String, _>("name")).collect();
+        for col in ["id", "kind", "occurred_at", "payload"] {
+            assert!(
+                names2.contains(&col.to_string()),
+                "lumotia_events must have column {col}; got {names2:?}"
+            );
+        }
+
+        // Both indexes on lumotia_events must exist.
+        let idx_names2: Vec<String> = sqlx::query_scalar(
+            "SELECT name FROM sqlite_master \
+             WHERE type = 'index' AND tbl_name = 'lumotia_events'",
+        )
+        .fetch_all(&pool)
+        .await
+        .expect("read lumotia_events indexes");
+        for idx in ["idx_lumotia_events_kind", "idx_lumotia_events_occurred"] {
+            assert!(
+                idx_names2.iter().any(|n| n == idx),
+                "expected index {idx}, got {idx_names2:?}",
+            );
+        }
+    }
+
     #[tokio::test]
     async fn migration_v16_adds_deleted_at_column_and_index() {
         // Rev-2 / Rev-3 atomiser fix (2026-05-12). Verify the soft-delete