feat(post-form): U6 — owner-scoped delete API route + card wiring

New custom-in-repo plugin entry-actions (un-ignored in .gitignore, NOT in
plugins.txt) registers DELETE /api/v1/entry/{slug} via onApiRegisterRoutes
(KTD5). The handler requires the authenticated site OWNER (not any login/admin),
rejects unsafe slugs (400), resolves the target through the page tree, asserts it
is a direct child of the active trip's dailies container, deletes the folder and
clears the cache — sharing EntryScopeGuard with the save path so R6 can't diverge.
A lazy per-namespace autoloader loads the controller on cached-route requests
(the router dispatches from route.cache without re-firing onApiRegisterRoutes).
EntryScopeGuard gains isOwnerUser() (API user comes from the request, not
$grav['user']) and enablePages() before find() (pages are lazily disabled in the
API context).

feed-actions.js (new, built via make build-assets; loaded on the trip/home feed
only when owner_can_edit) wires the inline Delete → Cancel/Confirm swap: on
Confirm it locks both buttons (D2, no double-DELETE), fetches the route
(credentials:include), removes the card, moves focus to the next card, and
announces via a page-level aria-live region (D4); on failure it restores the
control with an inline message (D7). Adds .sr-only + .entry-action[hidden] CSS.

Verified on the 2.0.4 container — API matrix 8/8 (anon 401, non-owner 403, bad
slug 400, out-of-scope 404, owner 204 + folder removed; V3/V5) and the delete UI
in a headless browser (confirm swap, card removal, disk deletion, live announce).

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01H1FrCYNq6RXdGYbn5PFrhM

plugins/cache-on-save/classes/EntryScopeGuard.php

@@ -50,6 +50,19 @@ class EntryScopeGuard
         if (!$user || empty($user->authenticated)) {
             return false;
         }
+        return self::isOwnerUser($grav, $user);
+    }
+
+    /**
+     * Owner check for an explicit user object — used by the API delete route,
+     * whose authenticated user comes from the request (api_user attribute), not
+     * $grav['user']. Same rule: username must equal site.owner_username.
+     */
+    public static function isOwnerUser(Grav $grav, $user): bool
+    {
+        if (!$user || !isset($user->username)) {
+            return false;
+        }
         $owner = $grav['config']->get('site.owner_username');
         return is_string($owner) && $owner !== '' && $user->username === $owner;
     }
@@ -97,7 +110,14 @@ class EntryScopeGuard
         if ($dailies === null) {
             return null;
         }
-        $page = $grav['pages']->find($dailies . '/' . $segment);
+        $pages = $grav['pages'];
+        // In the API request context the page tree is lazily disabled; enable it
+        // so find() can resolve (mirrors the api plugin's own resolvePageByRoute).
+        // Idempotent — a no-op in the frontend save-path context.
+        if (method_exists($pages, 'enablePages')) {
+            $pages->enablePages();
+        }
+        $page = $pages->find($dailies . '/' . $segment);
         if ($page === null) {
             return null;
         }