fix: address review #4 — board name invalidation, SVG tests, test gaps

- Pass board.name to all invalidateBoardCache calls (permission mutations)
- Align integration create invalidation with update/delete
- Add initial-fetch-failure test for integration-data-cache
- Expand SVG XSS test corpus (javascript:, xlink:href, @import, onbegin)
- Forbid <style> tags in SVG sanitizer to prevent CSS injection
- Fix duplicate export in packages/common/src/index.ts

packages/common/src/index.ts

@@ -12,4 +12,3 @@ export * from "./error";
 export * from "./theme";
 export * from "./function";
 export * from "./retryable-loader";
-export * from "./id";