v0.2 Phase 2: install Bits UI / Formsnap / Superforms / Zod / @internationalized/date

Exact-pinned per the plan:

  bits-ui@2.18.1                 — headless Svelte 5 primitives
  formsnap@2.0.1                 — field+label+error wrapper
  sveltekit-superforms@2.30.1    — form state + validation
  zod@4.4.3                      — schema validation (superforms accepts ^3.25 || ^4)
  @internationalized/date@3.12.1 — bits-ui peer dep

Phase 2 gate green: npm audit signatures (273 verified registry sigs +
93 attestations), npm run check (clean), npm test (clean), npm run
test:e2e (16/16). No regressions in the Phase 1 smoke baseline.

@chenglou/pretext audit (plan risk item): kept — still referenced in
src/lib/utils/textMeasure.ts and src/lib/shims.d.ts.

No primitives wired yet — that's Phase 5. This commit only puts the
headless layer on disk so Phase 4/5 can import from it.

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>

package.json

@@ -24,14 +24,19 @@
   "license": "MIT",
   "dependencies": {
     "@chenglou/pretext": "0.0.5",
+    "@internationalized/date": "3.12.1",
     "@tauri-apps/api": "2.10.1",
     "@tauri-apps/plugin-autostart": "^2.5.1",
     "@tauri-apps/plugin-dialog": "^2.7.1",
     "@tauri-apps/plugin-global-shortcut": "^2.3.1",
     "@tauri-apps/plugin-notification": "^2.3.3",
     "@tauri-apps/plugin-opener": "^2",
+    "bits-ui": "2.18.1",
+    "formsnap": "2.0.1",
     "lucide-svelte": "^0.577.0",
-    "svelte-i18n": "^4.0.1"
+    "svelte-i18n": "^4.0.1",
+    "sveltekit-superforms": "2.30.1",
+    "zod": "4.4.3"
   },
   "devDependencies": {
     "@axe-core/playwright": "4.11.3",