refactor: form-core wiring, JWT sessions, slowapi, packaging, frontend rewrite, test declutter

backend/app/flows/schemas.py

@@ -76,6 +76,13 @@ class RunRead(BaseModel):
     finished_at: datetime | None
 
 
+class NamedRunRead(BaseModel):
+    """A run with its flow name (GET /api/runs aggregate, kills N+1)."""
+
+    flow_name: str
+    run: RunRead
+
+
 class ApprovalCreate(BaseModel):
     """Callback contract: a flow reports a terminal approval state."""