feat: organizations decide who sees whom; sharing only by owners

- Server admins manage organizations (one per user); new admin section,
  organization on user creation and invites, setup creates the first one
- Sharing modes private / organizations / open, enforced centrally
  (CanSee, CanShareWith) for directory, all shares and groups; unknown and
  invisible targets give the same error
- Losing visibility (org change, mode change, leaving a group) prunes shares,
  group memberships and task assignments; dry run warns before tightening
- Only owners share; editors can no longer reshare lists or remove others'
  shares; legacy task_lists.team_id and old /organizations endpoints removed
  (FLAW-06, FLAW-10, FLAW-24)
- Schema version: outdated databases are wiped and recreated on start
- Fix setup sample data (createSampleData was ignored); setup and admin
  use a shared ToggleSwitch instead of checkboxes
- Docs: sharing-and-permissions rewritten, ui-patterns, REST, DB, flaws

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

internal/storage/task_assignees_test.go

@@ -30,7 +30,13 @@ func TestTaskAssigneesFollowListAccess(t *testing.T) {
 		t.Fatalf("UpdateThoughtTriage failed: %v", err)
 	}
 
-	org, _ := store.CreateOrganization(owner.ID, "Familie")
+	// Everyone but the stranger shares the organization, so they can see each other
+	org, _ := store.CreateOrganization("Familie")
+	for _, u := range []string{owner.ID, direct.ID, viaTeam.ID} {
+		if err := store.SetUserOrganization(u, org.ID); err != nil {
+			t.Fatalf("SetUserOrganization failed: %v", err)
+		}
+	}
 	team, err := store.CreateTeam(org.ID, "WG", "")
 	if err != nil {
 		t.Fatalf("CreateTeam failed: %v", err)