feat(rust): dangerous DML confirmation gate #1885

Parent

#1848

Goal

Classify UPDATE/DELETE/DROP/etc. and require explicit confirm flag from UI.

Done when

• Without flag, command returns typed NeedsConfirmation

How to work

• Branch: issue/<n>-slug from epic/tauri-migration (create epic branch if missing).
• One PR → Closes #<n>.
• Target PR base: epic/tauri-migration until the SQLite slice is green.
• Do not edit Flutter app code unless this issue says so.