fix: refresh profile after email verification

[bluewandd]

An already-open Lachesis window could keep showing the email-verification banner after verification completed elsewhere. The server updated the profile, but the cached response was not refreshed on window activation.

The profile query now refreshes on visibility or window focus only while its cached profile is not verified. Once verification succeeds, later focus returns generate no profile requests. Startup uses the canonical profile key and skips profile requests when there is no session, avoiding the previous anonymous request and refreshing persisted profile data with one request.

The token checks are request guards only; they are not cache isolation and this change does not claim to clear or hide hydrated data. Ordinary query defaults remain unchanged.

A focused Query harness confirmed the normal false/true states, malformed cached data, request counts, and absence of unhandled rejections. Formatting and diff checks pass.

[bluewandd]

Superseded. This PR has been rewritten as a single independent change against current main, and no longer belongs to a sequence or requires any particular merge order.

The earlier branch was based on 7e8c988 and is gone. The new commit is 3 files, +25/-5, and touches only the profile query lifecycle, the focus listener, and the startup prefetch. See the updated description.