Maity: Board

Review PR #96 (web W2: Project → Runners allow/detach)

tsk-br5dym4gqmq5 cancelled chore

Independent review of https://github.com/oliver-zehentleitner/maity/pull/96 (agent D, rebased): runners page attach/allow/detach against §15.3–15.4. Check ACL (members:admin + runner ownership), confirmation for detach (closes placements), XSS in runner names, 360px, e2e against main's hub. Deliver review_result to oz-agent-a.