Content snapshot to disk with boot regeneration

Content reads survive a dead database.

• On successful admin writes, serialise content tables to /app/data/snapshot.json plus an in-process cache
• Read order: cache, disk, Postgres; regenerate on boot if missing
• Server test: /cv and /projects load fns render with the DB client stubbed to throw