fix(web): unwrap CacheMetaInterceptor envelope + dev port migration + homepage diacritic

Several fixes discovered while smoke-testing the homepage under the new
port layout (web 3200 / api 3201) to avoid clashing with a sibling project:

- analytics-api: add `unwrap<T>()` helper for the `{ data, cacheMeta }`
  envelope the backend CacheMetaInterceptor appends to every
  `/analytics/*` response. Apply to all 9 analytics methods. Without this
  `data.activeCount` (etc.) were `undefined`, crashing KpiStrip with
  `TypeError: Cannot read properties of undefined (reading 'toLocaleString')`.
- public page: hard-coded `city = 'Ho Chi Minh'` returned 0 rows because
  the DB stores `'Hồ Chí Minh'` and the SQL filter is case-insensitive but
  not diacritic-insensitive. Use the accented spelling.
- use-analytics hooks: add `useAuthedAnalytics()` gate so unauthenticated
  visitors on public routes no longer fire 401s from analytics queries.
- next.config.js CSP: add localhost:3200/3201 (http + ws) to connect-src so
  the web origin can reach the relocated API. Without this fetches hit
  `TypeError: Failed to fetch` on login.
- .claude/launch.json + package.json: web → 3200, api → 3201 (was 3000/3001,
  conflicting with the sibling psyforge project also using 3000).
- Minor follow-ups from parallel QA work on this branch (analytics modules,
  notifications gateway, auth test fixtures, trending-areas handler + DTO
  + tests, a few E2E smoke specs).

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>

apps/web/app/[locale]/(auth)/__tests__/login.spec.tsx

@@ -53,6 +53,7 @@ vi.mock('@/lib/auth-store', () => {
   const store = {
     user: null,
     isAuthenticated: false,
+    isInitialized: false,
     isLoading: false,
     error: null,
     login: vi.fn(),
@@ -80,6 +81,7 @@ describe('LoginPage', () => {
   let mockStore: {
     user: null;
     isAuthenticated: boolean;
+    isInitialized: boolean;
     isLoading: boolean;
     error: string | null;
     login: ReturnType<typeof vi.fn>;
@@ -97,6 +99,7 @@ describe('LoginPage', () => {
     mockStore = {
       user: null,
       isAuthenticated: false,
+      isInitialized: false,
       isLoading: false,
       error: null,
       login: vi.fn(),

apps/web/app/[locale]/(auth)/__tests__/register.spec.tsx

@@ -48,6 +48,7 @@ vi.mock('@/lib/auth-store', () => {
   const store = {
     user: null,
     isAuthenticated: false,
+    isInitialized: false,
     isLoading: false,
     error: null,
     login: vi.fn(),
@@ -75,6 +76,7 @@ describe('RegisterPage', () => {
   let mockStore: {
     user: null;
     isAuthenticated: boolean;
+    isInitialized: boolean;
     isLoading: boolean;
     error: string | null;
     login: ReturnType<typeof vi.fn>;
@@ -92,6 +94,7 @@ describe('RegisterPage', () => {
     mockStore = {
       user: null,
       isAuthenticated: false,
+      isInitialized: false,
       isLoading: false,
       error: null,
       login: vi.fn(),