Remove all inline JS from admin templates

script-src 'self' blocks inline onclick handlers and <script> blocks.
Migrate all interactive behavior to data-* attributes wired by mcias.js:

- data-toggle-form: accounts, policies, pgcreds create-form buttons
- data-href: audit clickable table rows
- data-tab: policy form tab switching (moved showTab from inline script)

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

web/templates/accounts.html

@@ -7,11 +7,13 @@
     <p class="text-muted text-small">Manage user and service accounts</p>
   </div>
   <button class="btn btn-primary"
-          onclick="var f=document.getElementById('create-form');f.style.display=f.style.display==='none'?'block':'none'">
+          data-toggle-form="create-form"
+          data-label-show="+ New Account"
+          data-label-hide="Cancel">
     + New Account
   </button>
 </div>
-<div id="create-form" class="card mt-2" style="display:none">
+<div id="create-form" class="card mt-2" hidden>
   <h2 style="font-size:1rem;font-weight:600;margin-bottom:1rem">Create Account</h2>
   <form hx-post="/accounts" hx-target="#accounts-tbody" hx-swap="afterbegin">
     <input type="hidden" name="_csrf" value="{{.CSRFToken}}">
@@ -36,7 +38,9 @@
     <div class="form-actions">
       <button class="btn btn-primary" type="submit">Create</button>
       <button class="btn btn-secondary" type="button"
-              onclick="document.getElementById('create-form').style.display='none'">Cancel</button>
+              data-toggle-form="create-form"
+              data-label-show="Cancel"
+              data-label-hide="Cancel">Cancel</button>
     </div>
   </form>
 </div>