Consistent status colors, prevent native context menu leaks, fix settings 404

- Task status badges (bulk change-status popover, right-click menu) now
  use the real per-project TaskStatusesStore colors/labels instead of the
  hardcoded TaskStatus enum, matching EditableTaskStatus everywhere.
- Suppress the native browser context menu from leaking through gaps in
  the task table (header/empty space), open popovers/dropdowns and their
  submenus, the status Select, and a second right-click at the same
  coordinates (the popover's positioning anchor now has
  pointer-events: none so it doesn't intercept the repeat click).
- Fix 404s on /api/settings/* caused by a double-declared route prefix.
- Fix 422 on bulk-applying a custom task status by relaxing
  BulkStatusUpdate.status from the TaskStatus enum to str, matching the
  existing single-task update schema.

Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>

backend/routers/settings.py

@@ -14,7 +14,7 @@ from schemas.global_settings import (
 from utils.auth import get_current_user, require_admin_permission
 from models.user import User
 
-router = APIRouter(prefix="/settings", tags=["settings"])
+router = APIRouter(tags=["settings"])
 
 # Default upload limit in MB (1GB)
 DEFAULT_UPLOAD_LIMIT_MB = 1000

backend/schemas/task.py

@@ -214,7 +214,7 @@ class ReviewResponse(ReviewBase):
 # Bulk action schemas
 class BulkStatusUpdate(BaseModel):
     task_ids: List[int] = Field(..., min_length=1)
-    status: TaskStatus
+    status: str  # Changed from TaskStatus enum to str to support custom statuses
 
 
 class BulkAssignment(BaseModel):