fix(static-assets): also cache-bust raw /static/ refs (fonts CSS, store JS)

The initial codemod only converted url_for('*_static', path='*.js'|'*.css')
patterns and missed 19 raw /static/... references — most importantly the
shared/fonts/inter.css link in all four base.html files, plus a handful
of <script src="/static/modules/..."> tags in marketplace/billing/orders
templates and the storefront login/register/forgot/reset pages.

Result: deploys now flip ?v=<sha> on every JS/CSS asset that reaches the
browser, not just the ones loaded via url_for().

FE-024 rule extended to flag src="/static/...*.(js|css)" patterns too.

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>

scripts/validate/validate_architecture.py

@@ -1798,7 +1798,8 @@ class ArchitectureValidator:
                 return  # Only report once per file
 
     _STATIC_V_PATTERN = re.compile(
-        r"""url_for\(\s*['"]\w+_static['"]\s*,\s*path=['"][^'"]+\.(?:js|css)['"]\s*\)""",
+        r"""url_for\(\s*['"]\w+_static['"]\s*,\s*path=['"][^'"]+\.(?:js|css)['"]\s*\)"""
+        r"""|(?:src|href)=['"]/static/[^'"]+\.(?:js|css)['"]""",
         re.IGNORECASE,
     )