chore(release): publish db 0.8.21, cli 0.8.65 and seven in-flight packages

Carries the rollback refusal in db and the matching CLI message, together
with the auth, captcha, csr, dev-server, dev-toolbar, ui and validation
changes that were already in the working tree, since publishing stages
from it and those files would otherwise ship without being recorded here.

  @wrnexus/auth        0.8.28 -> 0.8.29
  @wrnexus/captcha     0.8.15 -> 0.8.16
  @wrnexus/cli         0.8.64 -> 0.8.65
  @wrnexus/csr         0.8.37 -> 0.8.38
  @wrnexus/db          0.8.20 -> 0.8.21
  @wrnexus/dev-server  0.8.60 -> 0.8.61
  @wrnexus/dev-toolbar 0.8.17 -> 0.8.18
  @wrnexus/ui          0.8.75 -> 0.8.76
  @wrnexus/validation  0.8.12 -> 0.8.13

Also declares Event among the browser globals captcha's client asset
already lists, which was the last lint failure, and reformats four files.
typecheck, lint, 1998 tests and format:check all pass.

Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>

packages/ui/components/AdvancedSelect.wrn

@@ -344,7 +344,7 @@ component AdvancedSelect {
           {#if searchable}
             <label class="wrn-next__select-search">
               <span class="wrn-visually-hidden">{searchPlaceholder}</span>
-              <span class="wrn-next__search-icon" aria-hidden="true">⌕</span>
+              <span class="wrn-next__search-icon icon-[lucide--search]" aria-hidden="true"></span>
               <input
                 type="search"
                 value="{query}"
@@ -473,8 +473,17 @@ component AdvancedSelect {
       display: block;
     }
 
+    .wrn-next__select-search .wrn-next__search-icon {
+      inset-inline-start: 0.8em;
+      left: auto;
+      width: 1em;
+      height: 1em;
+      pointer-events: none;
+    }
+
     .wrn-next__select-search input {
-      padding-left: 2.25em;
+      padding-inline-start: 2.4em;
+      padding-inline-end: 0.75em;
     }
 
     .wrn-next__select-tags {