Maity: Board

Review PR #126 (web: board card management, drag and drop)

tsk-37k75z3v6bnz done chore Maity Review ChatGPT 001 (maity-review-chatgpt-001)

Independent review of https://github.com/oliver-zehentleitner/maity/pull/126 (agent D). Check against docs/api.md §6.4-6.5 (POST/PATCH tasks fields, who may assign, status transitions for humans incl. done authority, dependencies_open, freeze/fixes-only reason, lease rules) and hub/src/maity_hub/cards.py check_transition: does the Move menu/drag offer exactly what the hub allows? Also: keyboard path equal to drag, focus, 360px, XSS in titles/bodies, stale-state races (card changed by an agent while the menu is open), and whether the mock really mirrors the hub. Deliver review_result to oz-agent-a.