Remove all inline JS from admin templates

script-src 'self' blocks inline onclick handlers and <script> blocks.
Migrate all interactive behavior to data-* attributes wired by mcias.js:

- data-toggle-form: accounts, policies, pgcreds create-form buttons
- data-href: audit clickable table rows
- data-tab: policy form tab switching (moved showTab from inline script)

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

web/templates/pgcreds.html

@@ -82,7 +82,9 @@
   <div style="display:flex;justify-content:space-between;align-items:center;margin-bottom:.5rem">
     <h2 style="font-size:1rem;font-weight:600;margin:0">New Credentials</h2>
     <button class="btn btn-sm btn-secondary"
-            onclick="var f=document.getElementById('pgcreds-create-form');f.hidden=!f.hidden;this.textContent=f.hidden?'Add Credentials':'Cancel'">Add Credentials</button>
+            data-toggle-form="pgcreds-create-form"
+            data-label-show="Add Credentials"
+            data-label-hide="Cancel">Add Credentials</button>
   </div>
   <div id="pgcreds-create-form" hidden>
     <p class="text-muted text-small" style="margin-bottom:1rem;margin-top:.5rem">