fix(gbp): render source tags as HTML in audit modal + add migration 090

GBP audit modal displayed raw <span> tags instead of rendered HTML
because updateStep() used textContent instead of innerHTML.

Migration 090: Lord Alkohole NIP update (company transformation).

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

database/migrations/090_update_lord_company.sql

@@ -0,0 +1,24 @@
+-- Migration 090: Update Lord Alkohole → Lord sp. z o.o.
+-- Firma przekształciła się ze spółki cywilnej (P.H.U. S&K TOBACCO s.c.)
+-- w spółkę z o.o. Nowe dane od kierownika biura Izby (2026-03-25).
+--
+-- Stare dane: name='Lord Alkohole', legal_name='P.H.U. S&K TOBACCO s.c.', NIP=5871649864
+-- Nowe dane: legal_name='Lord sp. z o.o.', NIP=5882533102
+
+BEGIN;
+
+-- Backup current values (as comment for reference)
+-- SELECT id, name, legal_name, nip, slug FROM companies WHERE id = 76;
+
+UPDATE companies
+SET
+    legal_name = 'Lord sp. z o.o.',
+    nip = '5882533102',
+    updated_at = NOW()
+WHERE id = 76
+  AND nip = '5871649864';  -- safety check: only update if old NIP matches
+
+-- Verify
+-- SELECT id, name, legal_name, nip, slug, updated_at FROM companies WHERE id = 76;
+
+COMMIT;

templates/gbp_audit.html

@@ -2448,7 +2448,7 @@ function updateStep(stepId, status, message) {
     iconEl.innerHTML = icons[status] || icons.pending;
     textEl.className = 'step-text ' + status;
     if (message) {
-        textEl.textContent = message;
+        textEl.innerHTML = message;
     }
 }