[codex] Make Run Now publish full pipeline

[peteromallet]

Summary

• Change DataClaw.app Run Now to execute the full automated update flow: export locally, confirm the automated review, then publish the confirmed file.
• Route scheduled sync through the same full pipeline so it matches Run Now behavior.
• Add a Confirm progress stage and clearer blocked/error handling in the dashboard.
• Add the DataClaw logo to the right side of the top navigation bar.

Why

Run Now previously called only the final publish command. If the latest export had not been confirmed, the CLI correctly blocked the publish, but the UI showed a stale active progress card that made the run look stuck. The app now matches the intended product behavior: use saved config/redactions/privacy settings and run the complete publish pipeline.

Validation

• cargo test --manifest-path app/src-tauri/Cargo.toml
• pnpm run build

Notes

Untracked local files dataclaw-launch-script.md and runs/ were left out of this PR.