guard double-apply, hide error msg, wohnungen polish, bitwarden block

- /actions/apply now no-ops (returns fresh partial) when a running
  application exists for this user+flat, or when a previous one succeeded.
  The list button was already visually disabled; this closes the direct-POST
  and double-click loopholes
- Drop the one-line error message under flat entries in the list
  (bewerbung_detail still shows the full message + the forensic ZIP report)
- Strip "min morgens" commute chip from the list; alert._flat_payload sends
  an empty connectivity dict so Maps.calculate_score is no longer called on
  every flat. Maps.calculate_score + Flat.connectivity stay in the codebase
  for easy re-enable (one-line swap in _flat_payload)
- List entry shows "vor 23 min" instead of "entdeckt vor 23 min"
- Bitwarden: rename profile email/immomio fields to opaque names
  (contact_addr, immomio_login, immomio_secret) + add data-bwignore across
  every settings form / input. Server-side update_profile maps the new
  field names back to the existing DB columns

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>

web/templates/_settings_users.html

@@ -8,11 +8,11 @@
     <h3 class="font-semibold mb-3">Neuen Benutzer anlegen</h3>
     <form method="post" action="/actions/users/create"
           class="grid grid-cols-1 md:grid-cols-3 gap-3 items-end"
-          autocomplete="off" data-lpignore="true" data-1p-ignore data-form-type="other">
+          autocomplete="off" data-lpignore="true" data-1p-ignore data-bwignore data-form-type="other">
         <input type="hidden" name="csrf" value="{{ csrf }}">
         <div>
             <label class="block text-xs uppercase text-slate-500 mb-1">Benutzername</label>
-            <input class="input" name="username" required autocomplete="off" data-lpignore="true" data-1p-ignore>
+            <input class="input" name="username" required autocomplete="off" data-lpignore="true" data-1p-ignore data-bwignore>
         </div>
         <div>
             <label class="block text-xs uppercase text-slate-500 mb-1">Passwort (≥ 10 Zeichen)</label>