guard double-apply, hide error msg, wohnungen polish, bitwarden block

- /actions/apply now no-ops (returns fresh partial) when a running
  application exists for this user+flat, or when a previous one succeeded.
  The list button was already visually disabled; this closes the direct-POST
  and double-click loopholes
- Drop the one-line error message under flat entries in the list
  (bewerbung_detail still shows the full message + the forensic ZIP report)
- Strip "min morgens" commute chip from the list; alert._flat_payload sends
  an empty connectivity dict so Maps.calculate_score is no longer called on
  every flat. Maps.calculate_score + Flat.connectivity stay in the codebase
  for easy re-enable (one-line swap in _flat_payload)
- List entry shows "vor 23 min" instead of "entdeckt vor 23 min"
- Bitwarden: rename profile email/immomio fields to opaque names
  (contact_addr, immomio_login, immomio_secret) + add data-bwignore across
  every settings form / input. Server-side update_profile maps the new
  field names back to the existing DB columns

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>

alert/main.py

@@ -31,7 +31,11 @@ class FlatAlerter:
         self.last_response_hash = ""
 
     def _flat_payload(self, flat: Flat) -> dict:
-        c = flat.connectivity
+        # Transit-connectivity is disabled to save Google-Maps quota. The
+        # helper on Flat (flat.connectivity → Maps.calculate_score) is
+        # intentionally kept so it can be re-enabled without re-writing code —
+        # just replace the empty dict with `flat.connectivity` when needed.
+        c: dict = {}
         lat, lng = flat.coords
         return {
             "id": flat.id,