Address PR review on data request pages

Require a verified viewer email before creating a rights request and
validate the free-text fields with the same SafeText bounds the console
uses, so this public portal mutation stays safe and bounded.

Move myRightsRequests onto the base Query, drop the now-dead count
loaders, and order the RECTIFICATION enum value before PORTABILITY so
the Postgres sort order matches RightsRequestTypes().

Harden the v2 kit primitives: SegmentedControl keeps equal-width cards
(auto-fill), preserves its selection when the active card is toggled,
and forwards an accessible name; Field associates its label and error
by id/aria instead of wrapping the control in a label. Give the type
group an accessible name, require the name field for non-complaint
types, use a timezone-stable reference year, drop the underreporting
header count, and neutralize the response-deadline copy.

Signed-off-by: Émile Ré <emile@probo.com>

pkg/coredata/migrations/20260717T133746Z.sql

@@ -18,7 +18,9 @@
 -- OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
 -- SOFTWARE.
 
-ALTER TYPE rights_request_type ADD VALUE IF NOT EXISTS 'RECTIFICATION';
+-- Insert RECTIFICATION before PORTABILITY so the enum's sort order matches the
+-- canonical RightsRequestTypes() ordering used for type-sorted cursors.
+ALTER TYPE rights_request_type ADD VALUE IF NOT EXISTS 'RECTIFICATION' BEFORE 'PORTABILITY';
 ALTER TYPE rights_request_type ADD VALUE IF NOT EXISTS 'OBJECTION';
 ALTER TYPE rights_request_type ADD VALUE IF NOT EXISTS 'COMPLAINT';