Use the real today everywhere

The client constant TODAY_STR and the bootstrap response's today field
were both hardcoded to 2026-04-25, leaving date inputs in the New
product, Audit, and Mark consumed flows seeded with a stale date and
quietly staling out every "days since" / audit-overdue calculation
across the app.

TODAY_STR now resolves at module load from new Date() in local time,
and bootstrap returns new Date().toISOString().slice(0, 10).

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>

server/src/routes/bootstrap.ts

@@ -123,6 +123,6 @@ bootstrapRouter.get("/bootstrap", (_req, res) => {
     brands,
     bins,
     strains: strainsOut,
-    today: "2026-04-25",
+    today: new Date().toISOString().slice(0, 10),
   });
 });