Add automatic OData filter sanitization

[alexisandreason]

Summary

• Adds model/odata.ts with escaping primitives (odataString, odataValue) and a composable Filter builder that automatically escapes string values — fixing searches that broke when a value contained a single quote (e.g. an email/name like O'Brien).
• Adds Filter.contains(field, value) for contains(...) predicates, escaping the value via odataString and composing with .and/.or/Filter.any like the other builders.
• Widens QueryContext.setFilter to accept string | Filter (non-breaking — existing string callers are unchanged) and exports the new module from index.ts.
• Migrates the highest-risk user-supplied string filters (UserName, DisplayName) in famis_client.ts to the Filter builder. Numeric-ID filters are intentionally left as-is and can be migrated incrementally.
• Filter composition is precedence-safe: composite operands are parenthesized when combined, since OData binds and tighter than or.

Design and implementation plan: docs/superpowers/specs/2026-06-02-odata-filter-sanitization-design.md, docs/superpowers/plans/2026-06-02-odata-filter-sanitization.md.

Test Plan

• Unit tests for odata.ts (escaping, type dispatch, builder composition incl. precedence safety)
• Unit tests for Filter.contains (escaping + composition)
• QueryContext.setFilter(Filter) renders the escaped $filter end-to-end via URL parsing
• tsc build clean

🤖 Generated with Claude Code

[alphahlee]

Code review

No issues found. Checked for bugs and CLAUDE.md compliance.

🤖 Generated with Claude Code

_{- If this code review was useful, please react with 👍. Otherwise, react with 👎.}