fix: P0 correctness/security fixes and P1 lint error resolution

P0: add missing 'developer' case to check_custom_feed_limit trigger,
scope user_entry_states join to authenticated user in API v1 entries,
replace in-memory rate limiting with Supabase-backed check_rate_limit RPC.

P1: fix all 9 ESLint errors — useSyncExternalStore for useIsMobile,
restructure WebhookSection to avoid set-state-in-effect, move ref
mutations into useEffect, replace <a> with <Link> on shared page,
ignore generated public/sw.js in eslint config.

1 files changed, 3 insertions, 2 deletions

diff --git a/apps/web/app/shared/[token]/page.tsx b/apps/web/app/shared/[token]/page.tsx
index 7c7a463..eaab4f1 100644
--- a/apps/web/app/shared/[token]/page.tsx
+++ b/apps/web/app/shared/[token]/page.tsx
@@ -1,4 +1,5 @@
 import type { Metadata } from "next"
+import Link from "next/link"
 import { createSupabaseAdminClient } from "@/lib/supabase/admin"
 import { sanitizeEntryContent } from "@/lib/sanitize"
 import { SharedEntryContent } from "./shared-entry-content"
@@ -159,12 +160,12 @@ export default async function SharedPage({ params }: SharedPageProperties) {
       <footer className="mt-12 border-t border-border pt-4 text-text-dim">
         <p>
           shared from{" "}
-          <a
+          <Link
             href="/"
             className="text-text-secondary transition-colors hover:text-text-primary"
           >
             asa.news
-          </a>
+          </Link>
         </p>
         {entry.url && (
           <p className="mt-1">