fix(review): harden security, stability, and efficiency across 7 dashboard pages

Security: sanitize innerHTML with escapeHtml in job-query, add rate limiting
to job-query and job-export endpoints, upgrade login rate limiter to Redis
cross-worker with in-memory fallback, cap resource_ids array at 50, limit
CSV export date range to 365 days.

Stability: wrap initPage calls in onMounted for wip-overview, resource-status,
and resource-history; unload inactive iframes in portal to free memory; add
±15% jitter to auto-refresh timers in useAutoRefresh and useQcGateData; batch
expanded job history loads with concurrency limit of 5.

Config: reorganize sidebar drawers, move query-tool to dev status.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

data/page_status.json

@@ -23,7 +23,7 @@
       "route": "/hold-history",
       "name": "Hold 歷史績效",
       "status": "dev",
-      "drawer_id": "reports",
+      "drawer_id": "drawer-2",
       "order": 3
     },
     {
@@ -40,7 +40,7 @@
       "route": "/resource-history",
       "name": "設備歷史績效",
       "status": "released",
-      "drawer_id": "reports",
+      "drawer_id": "drawer-2",
       "order": 5
     },
     {
@@ -75,14 +75,14 @@
       "route": "/job-query",
       "name": "設備維修查詢",
       "status": "released",
-      "drawer_id": "queries",
+      "drawer_id": "drawer",
       "order": 3
     },
     {
       "route": "/query-tool",
       "name": "批次追蹤工具",
-      "status": "released",
-      "drawer_id": "queries",
+      "status": "dev",
+      "drawer_id": "dev-tools",
       "order": 4
     },
     {
@@ -128,12 +128,6 @@
       "order": 1,
       "admin_only": false
     },
-    {
-      "id": "queries",
-      "name": "查詢類",
-      "order": 3,
-      "admin_only": false
-    },
     {
       "id": "dev-tools",
       "name": "開發工具",
@@ -143,6 +137,12 @@
     {
       "id": "drawer",
       "name": "查詢工具",
+      "order": 3,
+      "admin_only": false
+    },
+    {
+      "id": "drawer-2",
+      "name": "歷史報表",
       "order": 2,
       "admin_only": false
     }