Reusable facet design from COR-3895 / PR #723: build filter options from the authorized…

Reusable facet design from COR-3895 / PR #723: build filter options from the authorized, unpaginated parent-flow scope before applying the facet’s own filters, and normalize requested URL values against that option set. Reuse the same canonical/legacy attribution SQL for both filtering and facet construction so dashboard, analytics, and exports cannot drift. For PostgreSQL JSON validation that uses correlated scalar subqueries, resolve values in an authorized derived relation before GROUP BY; grouping the repeated raw expression can fail with SQLSTATE 42803. Provenance: web/src/lib/creation-attribution-facets.server.ts and web/src/lib/creation-attribution-sql.server.ts.