docs(todo): register the greentechhub v0.12 adoption work

[GreenMachine582]

Docs only. This registers the work to bring PyFinBot up to date with greentechhub-core v0.7.0, -fastapi v0.9.0 and -ui v0.12.0, as one PR per item, in todo.md → "greentechhub v0.12 adoption: settings, roles, email accounts".

1. build(deps): pin core ([sqlalchemy]) directly, bump fastapi and ui, reinstall .venv (it's on core 0.6.0), check the new look, and settle Dependabot build(deps): update sqlalchemy requirement from ~=2.0.40 to ~=2.1.1 #17.
2. feat(dev): a demo data seed (two users, stocks, about 150 transactions over three financial years, dividends), so every following PR has realistic data to test with.
3. feat(settings): user preferences, the /settings page and the shared user menu. The theme, dates, numbers and rows per page follow each user.
4. feat(email): per-user email accounts for Commsec sync, with the app password as an encrypted, write-only secret. This replaces the server-wide GMAIL_* mailbox, which today imports into whoever clicks Sync, and is a breaking config change. It waits on the gth secret-settings releases (gth build(deps): update pyjwt requirement from ~=2.13.0 to ~=2.15.0 #18–build(deps): greentechhub-ui v0.11.0; shared formatting filters #20, registered in those repos).
5. feat(permissions): roles with a ROLE_BOOTSTRAP admin, Settings › App, /admin/roles, and a locked-down users API (GET/POST /api/users/ need users.manage). That closes the two "Known limitations" it addresses.
6. chore(web): register_logging, register_health and register_exception_handlers.
7. Then the existing greentechhub-ui v0.11.0 items, starting with feat(transactions): date range presets #21.

Also: the v0.11 section gets a continuation note, the Known limitations entry says when it closes, and web-implementation-brief.md §2/§10 get pointers.

No code or version changes.

🤖 Generated with Claude Code