docs: panel header, type scale, account e-mail and the fixes of a full review

Header. The navbar carries the wordmark instead of the stamp - at nav
size the stamp dissolves into the brick bar - and under the bar runs the
stamp's paper margin with the perforation along its outer edge: round
holes, flat teeth, ink hairline, 8px under a 60px bar as on the mark.
docs/assets/selfpost-wordmark.svg and -ink are the stamp's own outlines;
the header comparison sheet is removed.

Type and tables. About 40 % of the text measured under 13px. Body is
16px with two tokens under it, 14px for supporting text and 13px for
upper-case mono labels and tags; Bulma's small sizes are overridden or
dropped (sp-small replaces is-size-7, is-small only on a progress bar).
Every table sits in a table-container, addresses break after the @, and
all screens fit without scrolling at 1280px and up.

Contrast. A sweep of every text node against its real ground found the
solid red button at 3:1, the muted grey at 4.1:1, the amber postmark and
Bulma's menu labels just under 4.5. All 33 screens now measure 4.5:1 or
better. The sweep is kept as panel/audit.js and its clean output joins
the evidence a restyle step must show.

Account and roles. A user's e-mail is its own field (users.email in the
2.0 baseline), edited under Account and seen by the global user on the
user form and list. The DMARC default report address is a user's
setting, not the server's: it moves to Account with its authorization
record, and a domain follows the default of a named user. Roles are
labelled by reach - global, domain - and each assignment list gains All,
a per-user flag that covers domains added later. Account gains
Notifications for the new roadmap candidate panel-notifications;
password-reset is added as a candidate too.

Also: the inbound spam filter is visible where a domain user looks (a
box on each inbound domain, a tag on the list, its socket on Health);
the health row is compact again and splits 6/3/2; a read-only value is
as tall as its Copy button; Preflight and Account lose boxes that only
filled space, and the plan's layout rule and contract now forbid them.

check.py gains the type floor, the table-container rule and the is-small
rule, and no longer counts min-width: 0 as setting a width.

Co-Authored-By: Claude Fable 5.1 <noreply@anthropic.com>

CHANGELOG.md

@@ -23,6 +23,60 @@ document is not part of the release.
 
 ### Added
 
+- Panel redesign, account e-mail and notifications: a user's e-mail is its own
+  field (2.0 baseline `users.email`, today `dmarc_report_email`) — edited under
+  **Account**, seen and set by the global administrator on the user form and in
+  the users list; DMARC may *use* it, as one choice beside the hosted address,
+  another address or none (Settings and domain settings). **Account** gains a
+  Notifications box and **Settings** a switch for the new roadmap candidate
+  `panel-notifications`; `password-reset` is added as a candidate too. The
+  inbound spam filter becomes visible: a *Spam filter* box on every inbound
+  domain, a tag on the inbound domains list, its socket among the milter
+  sockets. Preflight loses a box that only filled space — the test form now
+  shares its box with its result — and the plan's layout rule and contract say
+  so: what stands beside a form must be real. The role is labelled by its reach,
+  `global` or `domain` — everyone in the panel is an administrator — and each
+  assignment list on the user form gains **All**, a per-user flag that covers
+  domains added later. The DMARC default report address is a **user's**
+  setting, not the server's: it moves from Server › Settings to **Account**
+  with its report-authorization record, and a domain follows the default of a
+  *named* user, so two people sharing a domain never pull it two ways.
+- Panel redesign, contrast: a sweep of every text node against its real ground
+  found the solid red button at 3:1 (Bulma derives a solid button's text from
+  the fill's lightness; brick had been patched, red had not), the muted grey
+  at 4.1:1, the amber postmark at 4.0 and Bulma's menu labels at 4.2. Solid
+  buttons are white on colour, muted is `#5c6774`, the postmark uses the warn
+  token; all 33 screens now measure 4.5:1 or better. The sweep is kept as
+  `panel/audit.js` — text size, contrast, overflow, clipped values, missing
+  icons — and its clean output joins the evidence a restyle step must show.
+- Panel redesign, header (owner's choice: variant A, with the perforation on a
+  light edge as on the mark): the navbar carries the **wordmark** instead of
+  the stamp — `docs/assets/selfpost-wordmark.svg` and `-ink`, the stamp's own
+  outlines, recorded in `docs/product.md` — and under the brick bar runs the
+  stamp's paper margin with the perforation along its outer edge: round holes,
+  flat teeth, the ink hairline (`panel/perf-edge.svg`). All 33 screens rebuilt;
+  the components page documents the shell; the comparison sheet is removed.
+  The six health cards now split into six, three or two columns, so one card
+  is never left alone on a row. Three corrections after the owner's review:
+  the paper edge is 8px under the 60px bar — it had been scaled from the hole
+  size to 16px, where the mark's margin is a tenth of the brick field; the
+  health row is compact again (71px: smaller icons, each line a block with its
+  own line height, a verdict never wraps and stretches the row); and a
+  read-only value is as tall as the Copy button joined to it. `check.py` no
+  longer counts `min-width: 0` as setting a width. Text sizes: the filter
+  controls in a box head and the navbar's dropdown entries are 15px like the
+  bar itself (they had Bulma's `is-small` and its .875rem dropdown); `check.py`
+  now rejects `is-small` on anything but a progress bar.
+- Panel redesign, type scale: about 40 % of the panel's text measured under
+  13px (labels 11.7, table heads 10.5, fact labels 10.2, tags and help 11.3).
+  Body is now 16px with two tokens under it — `--sp-fs-s` 14px for supporting
+  text and `--sp-fs-xs` 13px for upper-case mono labels and tags; Bulma's
+  small sizes are overridden or dropped (`sp-small` replaces `is-size-7`), and
+  `check.py` fails any font size under the floor. Every table now sits in a
+  `table-container` (enforced), addresses in tables break after the `@`, the
+  inbound log folds the client IP under the sender; all screens fit without
+  scrolling at 1280px and up. Documented on the components page and in the
+  plan (§ Type and tables).
 - Panel redesign, header comparison sheet
   ([docs/assets/panel-redesign/header/](docs/assets/panel-redesign/header/index.html)):
   at nav size the stamp dissolves into the brick bar and the perforated edge