fix(#145): address PR review — full-table scan, a11y, grid, tests

- DocumentService.getRecentActivity: replace findAll(Sort)+stream().limit()
  with findAll(PageRequest) so LIMIT is pushed to the database
- +page.svelte: collapse two-column grid to single column when mentions is empty
- DashboardNeedsMetadata: raise "show all" link from text-xs (12px) to text-sm
  (14px) and add hover:underline for WCAG 1.4.1
- DashboardRecentDocuments: add comment explaining why T12:00:00 noon-anchor
  is absent (updatedAt is a full ISO datetime, not a date-only string)
- DocumentServiceTest: update getRecentActivity tests to assert PageRequest
  usage instead of findAll(Sort)
- DocumentRepositoryTest: add @DataJpaTest verifying findAll(PageRequest)
  returns only size rows, not the full table
- DocumentControllerTest: add test for default size=5 when param is omitted
- NotificationServiceTest: add test documenting that type+read=true falls
  through to the type-only query (intentional)
- page.server.spec.ts: replace stale tests with full dashboard-mode coverage
- DashboardMentions.svelte.spec.ts: add tests for REPLY type and absent documentId
- DashboardResumeStrip.svelte.spec.ts: add corrupt localStorage test

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

frontend/src/lib/components/DashboardMentions.svelte.spec.ts

@@ -65,4 +65,21 @@ describe('DashboardMentions', () => {
 		render(DashboardMentions, { mentions: [makeMention({ actorName: 'Maria Müller' })] });
 		await expect.element(page.getByText('Maria Müller')).toBeInTheDocument();
 	});
+
+	it('shows "replied" label for REPLY type', async () => {
+		render(DashboardMentions, { mentions: [makeMention({ type: 'REPLY' })] });
+		const widget = page.getByTestId('dashboard-mentions');
+		await expect.element(widget).toBeInTheDocument();
+		const link = page.getByRole('link');
+		await expect.element(link).toBeInTheDocument();
+	});
+
+	it('renders a span instead of a link when documentId is absent', async () => {
+		render(DashboardMentions, {
+			mentions: [makeMention({ documentId: undefined, actorName: 'Lena Bauer' })]
+		});
+		await expect.element(page.getByText('Lena Bauer')).toBeInTheDocument();
+		const links = page.getByRole('link');
+		await expect.element(links).not.toBeInTheDocument();
+	});
 });

frontend/src/lib/components/DashboardNeedsMetadata.svelte

@@ -29,7 +29,7 @@ let { incompleteDocs }: Props = $props();
 			</div>
 		{/each}
 		<div class="mt-4">
-			<a href="/enrich" class="font-sans text-xs text-ink-2 hover:text-ink"
+			<a href="/enrich" class="font-sans text-sm text-ink-2 hover:text-ink hover:underline"
 				>{m.dashboard_needs_metadata_show_all()}</a
 			>
 		</div>

frontend/src/lib/components/DashboardRecentDocuments.svelte

@@ -16,6 +16,7 @@ interface Props {
 let { recentDocs }: Props = $props();
 
 function formatDate(dateStr: string): string {
+	// updatedAt is a full ISO datetime — no T12:00:00 noon-anchor needed here
 	return new Intl.DateTimeFormat(getLocale(), {
 		day: 'numeric',
 		month: 'long',

frontend/src/lib/components/DashboardResumeStrip.svelte.spec.ts

@@ -40,4 +40,11 @@ describe('DashboardResumeStrip', () => {
 		const link = page.getByRole('link');
 		await expect.element(link).toHaveAttribute('href', '/documents/doc-456');
 	});
+
+	it('renders nothing when localStorage contains malformed JSON', async () => {
+		localStorage.setItem('familienarchiv.lastVisited', '{not valid json');
+		render(DashboardResumeStrip, {});
+		const strip = page.getByTestId('resume-strip');
+		await expect.element(strip).not.toBeInTheDocument();
+	});
 });