fix: correct tojson|safe usage in templates and update validator

- Remove |safe from |tojson in HTML attributes (x-data) - quotes must
  become " for browsers to parse correctly
- Update LANG-002 and LANG-003 architecture rules to document correct
  |tojson usage patterns:
  - HTML attributes: |tojson (no |safe)
  - Script blocks: |tojson|safe
- Fix validator to warn when |tojson|safe is used in x-data (breaks
  HTML attribute parsing)
- Improve code quality across services, APIs, and tests

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>

models/schema/admin.py

@@ -489,10 +489,18 @@ class LogSettingsResponse(BaseModel):
 class LogSettingsUpdate(BaseModel):
     """Update log settings."""
 
-    log_level: str | None = Field(None, description="Log level: DEBUG, INFO, WARNING, ERROR, CRITICAL")
-    log_file_max_size_mb: int | None = Field(None, ge=1, le=1000, description="Max log file size in MB")
-    log_file_backup_count: int | None = Field(None, ge=0, le=50, description="Number of backup files to keep")
-    db_log_retention_days: int | None = Field(None, ge=1, le=365, description="Days to retain logs in database")
+    log_level: str | None = Field(
+        None, description="Log level: DEBUG, INFO, WARNING, ERROR, CRITICAL"
+    )
+    log_file_max_size_mb: int | None = Field(
+        None, ge=1, le=1000, description="Max log file size in MB"
+    )
+    log_file_backup_count: int | None = Field(
+        None, ge=0, le=50, description="Number of backup files to keep"
+    )
+    db_log_retention_days: int | None = Field(
+        None, ge=1, le=365, description="Days to retain logs in database"
+    )
 
     @field_validator("log_level")
     @classmethod