fix: enforce gallery access and consolidate gallery workflows

Apply shared session, permission, ownership and lifecycle checks across
gallery access, media grants and session restoration. Validate mutation
origins, pin webhook DNS resolution and redact token-bearing request URLs.

Consolidate gallery creation and queries, extract frontend state hooks,
fix hook ordering and resource cleanup, and repair the fresh event schema.
Update affected dependencies and restore excluded CI suites with regression
and cross-database coverage.

backend/src/services/emailProcessor.js

@@ -1514,39 +1514,13 @@ async function testEmailConnection() {
   }
 }
 
-// Start email queue processor
-let emailQueueInterval = null;
-
+const emailTask = require('./scheduledTask').scheduledTask(processEmailQueue, { interval: 60000, initialDelay: 0 });
 function startEmailQueueProcessor() {
-  logger.info('Email queue processor: Attempting to start...');
-  
-  if (!emailQueueInterval) {
-    // Process immediately on start
-    processEmailQueue().catch(err => {
-      logger.error('Email queue processor: Initial processing failed:', err);
-    });
-    
-    // Then process every minute
-    emailQueueInterval = setInterval(() => {
-      processEmailQueue().catch(err => {
-        logger.error('Email queue processor: Periodic processing failed:', err);
-      });
-    }, 60000);
-    
-    processorStatus.started = true;
-    logger.info('Email queue processor started successfully');
-  } else {
-    logger.info('Email queue processor: Already running');
-  }
+  emailTask.start(); processorStatus.started = true;
 }
-
-function stopEmailQueueProcessor() {
-  if (emailQueueInterval) {
-    clearInterval(emailQueueInterval);
-    emailQueueInterval = null;
-    processorStatus.started = false;
-    logger.info('Email queue processor stopped');
-  }
+async function stopEmailQueueProcessor() {
+  await emailTask.stop(); processorStatus.started = false;
+  transporter?.close?.(); transporter = null;
 }
 
 // Initialize on module load - DISABLED for production startup