feat(report): v0.139.0 — immediate out-of-cycle hub report on user actions (Direction 1)

New report.Trigger (buffered-1 chan + worker; quiet 2s, min spacing 15s,
trailing-edge coalescing) generalizes the v0.70.0 geo out-of-band push.
One canonical fire closure in main.go; wired: geo save/sync + app
deploy/remove/delete (api reportPushNow), escrow recovery-code claim,
notification-prefs save, app-email toggle, offsite config + per-app
toggle, customer claim (web SetReportTrigger seam, nil-safe, fired only
after a successful local commit). 15-min hub-report cycle untouched as
the reconciliation backbone; hub.enabled=false stays a strict no-op.
Tests: trigger engine (2 red-proofs), seam fires-after-commit-only,
nil-seam no-ops.

controller/internal/web/claim.go

@@ -349,6 +349,9 @@ func (s *Server) handleClaimSubmit(w http.ResponseWriter, r *http.Request) {
 	if err := s.settings.SetClaimed(); err != nil {
 		s.logger.Printf("[WARN] [web] claim: marking claimed failed: %v", err)
 	}
+	// v0.139.0: report out-of-cycle so the hub's Claimed flag (and claim-code consumption)
+	// flips in seconds — the operator sees the customer claim land immediately.
+	s.reportTriggerNow()
 	s.claimClearFailures(ip)
 	s.invalidateAllSessions() // reset: kill old sessions; first-claim: none exist