feat(user-perf): add ui user-perf + dotfile filter

- add resource kind filter (file, folder, drive) in shared section (localStorage stored)
- add user preferences serverside store
- add client side dotfile filter (show/hide dotfiles) (user perf stored, default: dotfiles are shown)
  for security trashed dotfile are always displayed

  protection added: if a folder has only hidden items, a notification invite user to display it
  if a user rename or create a hidden item, a notification tells it to user

frontend/src/routes/favorites/+page.svelte

@@ -37,6 +37,15 @@
 
 	const byId = $derived(new Map(raw.map((it) => [it.resource.id, it])));
 
+	// Favorites view DELIBERATELY ignores `preferences.hideDotfiles`.
+	// Rationale: favoriting is an explicit "I want to keep an eye on
+	// this" action by the user — hiding a starred item on a different
+	// listing page because it starts with `.` contradicts that intent.
+	// The hide preference is for reducing incidental clutter in
+	// algorithmic listings (files/recent/photos), not for overriding
+	// user-intentional pins. Trash follows the same principle for a
+	// safety-net reason; the general rule shaping up: explicit-action
+	// surfaces don't filter, algorithmic surfaces do.
 	const entries = $derived(
 		raw.map((it): ResourceEntry => {
 			const isFile = it.resource_type === 'file';