// ui.js — small, CSP-friendly delegated handlers keyed off data-* attributes, so // templates need no inline on*= handlers (which our strict CSP forbids). Loaded on // every page. Supported hooks: // [data-confirm="msg"] — gate a form submit (on the