fix(§22.4a): scope RFCView entry-detail fetch to its collection (v0.52.1)

The §9 deployed-environment E2E harness (0.52.0), run against a PPE host
with per-collection-isolated content, surfaced a latent multi-collection
bug: RFCView computed the collection id from the route but called
getRFC(pid, slug) without it, so a named-collection entry was always
fetched via the project default-collection route — which 404s for an entry
that exists only in a named collection ("Error: Not found"; metadata panel
absent). Local/Tier-1 stacks masked it (same slug also reachable via the
default collection). Thread cid through all three getRFC call sites; re-run
the load effect on collection change.

Harness/test-infra (not in the deployed artifact):
- e2e: pre-record cookie consent via addInitScript (lib/fixtures.js) so the
  bottom-fixed consent banner can't intercept catalog row-select clicks on
  the slower deployed edge.
- testing/seed-ppe.sh: fail loudly on any non-2xx Gitea response (a
  swallowed 403 org-repo create had reached the deploy as a 502).
- testing/ppe-deploy-and-test.sh: seed via the Keychain admin token
  (write:organization needed to create the PPE repos); store the E2E secret
  newline-free; read EXPECT_VERSION from VERSION.

Patch bump 0.52.0 → 0.52.1; CHANGELOG updated.

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

testing/seed-ppe.sh

@@ -44,6 +44,22 @@ RESEED="${RESEED:-0}"
 
 api() { curl -s -H "Authorization: token $TOKEN" "$@"; }
 
+# mutate <method> <url> <json> <ok_code> <label>
+# Performs an authenticated write and FAILS LOUDLY on any non-<ok_code>
+# response. `api` uses `curl -s` (no -f), so without this a 403/409/etc.
+# returns exit 0 with an error JSON body — which once let a swallowed 403
+# (org-repo create needs write:organization) sail past as "created…" and
+# only surfaced as a 502 at deploy time. Never let an HTTP error be silent.
+mutate() {
+  _m="$1"; _u="$2"; _d="$3"; _ok="$4"; _lbl="$5"
+  _resp=$(api -X "$_m" "$_u" -H 'Content-Type: application/json' -d "$_d" -w '\n%{http_code}')
+  _code=$(printf '%s' "$_resp" | tail -n1)
+  if [ "$_code" != "$_ok" ]; then
+    echo "seed-ppe: $_lbl FAILED (http $_code): $(printf '%s' "$_resp" | sed '$d' | head -c 300)" >&2
+    exit 1
+  fi
+}
+
 echo "seed-ppe: target $GITEA org=$ORG registry=$REGISTRY_REPO content=$CONTENT_REPO project=$PROJECT_ID"
 
 ensure_repo() {
@@ -52,9 +68,9 @@ ensure_repo() {
     return 0
   fi
   echo "seed-ppe: creating repo $ORG/$1 (private)"
-  api -X POST "$GITEA/api/v1/orgs/$ORG/repos" -H 'Content-Type: application/json' \
-    -d "{\"name\":\"$1\",\"auto_init\":true,\"default_branch\":\"main\",\"private\":true}" >/dev/null \
-    || { echo "seed-ppe: failed to create $1" ; exit 1; }
+  mutate POST "$GITEA/api/v1/orgs/$ORG/repos" \
+    "{\"name\":\"$1\",\"auto_init\":true,\"default_branch\":\"main\",\"private\":true}" \
+    201 "create repo $ORG/$1 (org-repo create needs a write:organization token)"
 }
 
 # file_sha <repo> <path> -> prints the blob sha if the file exists, else empty
@@ -73,20 +89,18 @@ put_file() {
   if [ -n "$_sha" ]; then
     if [ "$_force" = "1" ]; then
       echo "seed-ppe: updating $_repo/$_path"
-      api -X PUT "$GITEA/api/v1/repos/$ORG/$_repo/contents/$_path" \
-        -H 'Content-Type: application/json' \
-        -d "{\"message\":\"reseed $_path\",\"content\":\"$_b64\",\"sha\":\"$_sha\",\"branch\":\"main\"}" >/dev/null \
-        || echo "seed-ppe: update $_repo/$_path failed, continuing"
+      mutate PUT "$GITEA/api/v1/repos/$ORG/$_repo/contents/$_path" \
+        "{\"message\":\"reseed $_path\",\"content\":\"$_b64\",\"sha\":\"$_sha\",\"branch\":\"main\"}" \
+        200 "update $_repo/$_path"
     else
       echo "seed-ppe: $_repo/$_path exists, leaving as-is"
     fi
     return 0
   fi
   echo "seed-ppe: creating $_repo/$_path"
-  api -X POST "$GITEA/api/v1/repos/$ORG/$_repo/contents/$_path" \
-    -H 'Content-Type: application/json' \
-    -d "{\"message\":\"seed $_path\",\"content\":\"$_b64\",\"branch\":\"main\"}" >/dev/null \
-    || { echo "seed-ppe: create $_repo/$_path failed" ; exit 1; }
+  mutate POST "$GITEA/api/v1/repos/$ORG/$_repo/contents/$_path" \
+    "{\"message\":\"seed $_path\",\"content\":\"$_b64\",\"branch\":\"main\"}" \
+    201 "create $_repo/$_path"
 }
 
 ensure_repo "$REGISTRY_REPO"