Phase 5: reply drafts — template/LLM draft, edit, SMTP send (AUD-71)

Implements Phase 5 of AGENTS.md §11 (FR-8, FR-15):

- Message detail pane (GET /partials/message) with body, recommended
  action, reply identity, template picker, editable draft, and history.
- internal/reply: OmniRoute (OpenAI-compatible) chat client and a
  template-based draft generator. All non-JEV models go through
  OmniRoute (§10).
- internal/mailops: SMTP send over smtp.gmail.com:587 with STARTTLS and
  the app password, forcing IPv4 (§9); FR-15 reply identity (send as the
  arrived-at X-Pm-Original-To address, else "Sam Rolfe"); threading via
  In-Reply-To/References; -check-smtp safe verification; and a
  [Gmail]/Sent Mail thread check.
- Migration v5 stores messages.message_id_header and drafts.sent_at;
  mailfetch parses Message-ID.
- Send is user-triggered only: CSRF + UI confirm + confirm=yes guard,
  no auto-send, duplicate-send refused. A sent reply files the original
  under Replied-to/<address> and logs every step (FR-13).
- Tests for reply, mailops SMTP/identity/thread check, store drafts and
  migration v5, and the server draft/edit/send guards.
- docs/phase5-replies.md, README, .env.example, docker-compose updated.

Co-Authored-By: Paperclip <noreply@paperclip.ing>

internal/store/triage.go

@@ -238,6 +238,33 @@ type ActionLogEntry struct {
 	CreatedAt string
 }
 
+// MessageActions returns the action-log rows for one message, newest first.
+// It backs the message detail pane (FR-13).
+func (s *Store) MessageActions(ctx context.Context, messageID int64, limit int) ([]ActionLogEntry, error) {
+	if limit < 1 {
+		limit = 20
+	}
+	rows, err := s.db.QueryContext(ctx, `
+SELECT id, message_id, action, COALESCE(actor, ''), COALESCE(detail, ''), created_at
+FROM actions_log WHERE message_id = ? ORDER BY id DESC LIMIT ?`, messageID, limit)
+	if err != nil {
+		return nil, fmt.Errorf("message actions: %w", err)
+	}
+	defer rows.Close()
+	var out []ActionLogEntry
+	for rows.Next() {
+		var e ActionLogEntry
+		if err := rows.Scan(&e.ID, &e.MessageID, &e.Action, &e.Actor, &e.Detail, &e.CreatedAt); err != nil {
+			return nil, fmt.Errorf("scan message action: %w", err)
+		}
+		out = append(out, e)
+	}
+	if err := rows.Err(); err != nil {
+		return nil, fmt.Errorf("message actions: %w", err)
+	}
+	return out, nil
+}
+
 // RecentActions returns the newest action-log rows, newest first.
 func (s *Store) RecentActions(ctx context.Context, limit int) ([]ActionLogEntry, error) {
 	if limit < 1 {