fix(web): complete the CSP-build migration across remaining surfaces

- audio reader: scrub/volume/speed/genre-tick bindings converted to
  component methods (onScrubInput, setVolumeFromEvent,
  applyDefaultSpeedFromSelect, volumeLabel, railTickStyle,
  isSkipActive/isSpeedActive) — these used Number/Math/String globals
  that the CSP evaluator cannot resolve
- fmtTime restored to the audioReader component: the unexport pass
  had ripped it from the Alpine.data object (time displays were dead)
- book detail: cover-upload click and banner edit validation moved to
  component methods (triggerCoverUpload, bannerEditHasText)
- admin/docs/index components: init() hooks for their x-init chains
- CSP header: 'unsafe-eval' dropped — the CSP build needs no eval
- e2e spec: replace test.info().annotate (unavailable in this
  Playwright version) with console logging

templates/admin.templ

@@ -130,7 +130,7 @@ templ Admin(user User, stats AdminStats) {
 							</h4>
 							<div id="scan-results-content" style="color: var(--text-secondary)"></div>
 							<div class="mt-4 flex gap-2">
-								<button @click="window.location.reload()" class="btn btn-primary">Refresh to View Books</button>
+								<button @click="reloadPage()" class="btn btn-primary">Refresh to View Books</button>
 								<button @click="hideScanProgress()" class="btn btn-secondary">Dismiss</button>
 							</div>
 						</div>