{#-
layout_app.html — the logged-in application layout (sidebar shell).
WHO INHERITS THIS: dashboard_admin.html, dashboard_client.html, and every
authenticated page. NOT for the public site (layout_public) or auth
(layout_auth). The user is always present here.
THE CONTRACT (same security wiring as every Fabbro layout):
- data-theme AND data-sidebar on the root from cookies -> no flash.
- for JS; forms submit a hidden csrf_token.
- Inline
{% endif %}
{% endwith %}
{% block scripts %}{% endblock %}
{#- ── Layout-scoped styles ── -#}