feat(uat-batch-10): copy polish, TTL trim, and a11y discrete fixes

- Supplemental-info link TTL trimmed from 30 → 14 days (single
  constant in supplemental-forms.service).
- LinkedBerthsList toggle renamed "Mark in EOI bundle" →
  "Include in EOI"; tooltip aria-label updated to match.
- Icon-only row-action triggers on the interest / client / berth list
  tables gain aria-label (Row actions for <name>) so SR users hear
  the row context.
- Table / Board view toggle on interest list gains aria-label +
  aria-pressed on each variant; wrapper gets role="group".
- Upcoming-milestones disclosure on interest-tabs gains
  aria-expanded + aria-controls; recommender Hide/Add filters
  button matches.
- BrandedAuthShell logo alt no longer defaults to "Sign in" — uses
  the configured `appName` when known, empty string otherwise so
  screen readers don't announce "Sign in" on password-reset /
  set-password pages.

tsc clean. 1419/1419 vitest pass.

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>

src/components/shared/branded-auth-shell.tsx

@@ -29,7 +29,11 @@ export function BrandedAuthShell({ children, branding }: BrandedAuthShellProps)
   const ctx = useAuthBranding();
   const logoUrl = branding?.logoUrl ?? ctx?.logoUrl ?? null;
   const backgroundUrl = branding?.backgroundUrl ?? ctx?.backgroundUrl ?? null;
-  const altText = branding?.appName ?? ctx?.appName ?? 'Sign in';
+  // When no port name is known, treat the logo as decorative — "Sign in"
+  // as alt text was being read on every auth page even when the page
+  // itself isn't a sign-in surface (e.g. password reset, set-password).
+  const appName = branding?.appName ?? ctx?.appName ?? null;
+  const altText = appName ?? '';
   // fixed inset-0 anchors the auth surface to the viewport directly —
   // iOS Safari ignores overflow-hidden on inner divs for body-level
   // scrolling, so a regular `h-dvh overflow-hidden` wrapper doesn't