Cars: drag the tabs into order, and a lock for every arrangement

Two things, both about layouts you arrange by dragging.

A car's tab bar now takes a drag: the tabs reorder as the pointer crosses
them and the arrangement saves on drop — or on dragend, since a tab
released in the gap beside the bar never produces a drop and would
otherwise revert on the next load. Same native drag events as the garage
and the Information rows, so also pointer-only, and it needs write access.

The order belongs to the car, like the choice of which tabs show at all,
so everyone it is shared with sees the same bar. It is stored as the full
list of keys, hidden tabs included, so a tab switched off and back on
returns to where it was rather than to the end; a key the stored
arrangement doesn't mention — a tab added in a later release — follows
the arranged ones. Information is arrangeable although it cannot be
switched off, which is why the validation needs arrangeableCarTabs rather
than reusing hideableCarTabs; it is derived from that set so the two
cannot drift as tabs are added. tabOrder rides on the existing PUT
/api/cars/{id}/view, so a tab drag never has to resend what is hidden.
Where the page opens is unchanged: Information, wherever it now sits.

And a padlock in the sidebar, above the theme toggle, holds every
arrangement in the app still at once — the garage, a car's tabs, its
Information rows, the provider's readings. It is a guard against nudging
a layout while reading it, not a permission: it is the user's own setting
and says nothing about what anybody may edit, so locking hides your own
drag handles rather than stopping a co-owner rearranging a shared car.
Stored as dragLocked on the profile, like the theme it sits above, so a
locked account is still locked on the next device — where a folded
provider card stays one browser's reading habit. Unlocked by default, so
nothing changes until it is clicked, and while locked the grab cursor and
the drag hints go with the drag.

Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>

API Server/internal/models/models.go

@@ -89,6 +89,12 @@ type Car struct {
 	// list, and joins the end when it does turn up.
 	MetricOrder []string `json:"metricOrder"`
 
+	// TabOrder is the order of the tabs themselves, as tab keys. It covers the
+	// hidden tabs too, like FieldOrder, so a tab switched back on returns to
+	// where it was, and it includes "info" — Information cannot be switched off
+	// but it can be moved off the front.
+	TabOrder []string `json:"tabOrder"`
+
 	// Owner is the user id that owns this car. Access is the requesting user's
 	// permission on it — "owner", "write", or "read" — computed by the API at
 	// read time and never persisted (omitempty; not part of the write payload).
@@ -427,6 +433,13 @@ type User struct {
 	FontSize   string `json:"fontSize"`   // small | medium | large
 	Role       string `json:"role"`       // user | admin
 
+	// DragLocked holds every arrangement on this account's pages still: the
+	// garage, a car's tabs, its Information rows, the provider's readings. A
+	// guard against nudging a layout while reading it, not a permission — it is
+	// the user's own setting and says nothing about what they may edit. False
+	// (draggable) on an account that has never set it.
+	DragLocked bool `json:"dragLocked"`
+
 	// Organization membership. Empty when the user belongs to no organization —
 	// the clients use that to offer creating one (which makes them its admin).
 	Organization     string `json:"organization"`