fix: reduce ClickHouse log noise, admin query spam, and diagram scan perf

- Set com.clickhouse log level to INFO and org.apache.hc.client5 to WARN
- Admin hooks (useUsers/useGroups/useRoles) now only fetch on admin pages,
  eliminating AUDIT view_users entries on every UI click
- Add ClickHouse projection on route_diagrams for (tenant_id, route_id,
  instance_id, created_at) to avoid full table scans on diagram lookups
- Bump @cameleer/design-system to v0.1.28 (PAUSED mode time range fix,
  refreshTimeRange API)
- Call refreshTimeRange before invalidateQueries in PAUSED mode manual
  refresh so sidebar clicks use current time window

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

cameleer3-server-app/src/main/resources/application.yml

@@ -66,6 +66,11 @@ clickhouse:
   username: ${CLICKHOUSE_USERNAME:default}
   password: ${CLICKHOUSE_PASSWORD:}
 
+logging:
+  level:
+    com.clickhouse: INFO
+    org.apache.hc.client5: WARN
+
 management:
   endpoints:
     web:

cameleer3-server-app/src/main/resources/clickhouse/V11__route_diagrams_projection.sql

@@ -0,0 +1,8 @@
+-- Projection for fast route_id + instance_id lookups on route_diagrams.
+-- The primary key is (tenant_id, content_hash) which serves hash-based lookups.
+-- Queries filtering by route_id + instance_id were scanning millions of rows.
+ALTER TABLE route_diagrams
+    ADD PROJECTION IF NOT EXISTS prj_route_instance
+    (SELECT content_hash, created_at ORDER BY tenant_id, route_id, instance_id, created_at);
+
+ALTER TABLE route_diagrams MATERIALIZE PROJECTION IF NOT EXISTS prj_route_instance