feat: scan history browser, user-scoped viewer tokens, export fixes, email fixes (v1.6.20)

- Scan history browser (history.js, GET /api/db/sessions, get_sessions(),
  get_session_items(ref_scan_id)) — review any past session without rescanning
- User-scoped viewer tokens (#34) — scope by individual employee across M365
  and GWS; autocomplete from Accounts list; dual-email support
- Fix: GWS scan never marked finished (end_scan → finish_scan) and emitted
  wrong SSE event (scan_done → google_scan_done), excluding GWS items from all
  exports
- Fix: file scan begin_scan called with wrong keyword args (TypeError swallowed),
  so local/SMB items were never written to DB
- Fix: Graph sendMail reported failure on success — _post() now returns {} on
  empty 202 response instead of raising JSONDecodeError
- Fix: Graph error hidden behind generic "No SMTP host" message when both Graph
  and SMTP were unavailable
- Fix: Gmail vs Google Workspace SMTP error messages distinguished by username
  domain; Workspace errors point to admin console, not personal security settings
- Docs: update README, MANUAL-EN, MANUAL-DA, CLAUDE.md, TODO.md, CHANGELOG.md

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

docs/manuals/MANUAL-DA.md

@@ -1,6 +1,6 @@
 # GDPR Scanner — Brugermanual
 
-Version 1.6.15
+Version 1.6.17
 
 ---
 
@@ -228,6 +228,18 @@ Brug filterbjælken over resultaterne til at indsnævre visningen:
 - **Risiko** — vis kun Art. 9, fotos, GPS eller høj-risiko-elementer.
 - **Rolle** — vis kun **Ansatte** eller **Elever**. Påvirker også eksporten: klikker du på **Excel** eller **Art.30**, mens en rolle er valgt, indeholder rapporten kun den pågældende gruppe, og filnavnet får suffikset `_elever` eller `_ansatte`.
 
+### Gennemse tidligere scanningssessioner
+
+Når en scanning er afsluttet, kan du gennemse resultaterne fra en tidligere scanningssession uden at køre en ny scanning.
+
+- Klik på **Sessioner**-knappen i historikbanneret (der vises over resultatgitteret, når en scanning er afsluttet) for at åbne sessionsvælgeren.
+- Hver række viser dato og tidspunkt, hvilke kilder der blev scannet, og hvor mange elementer der blev fundet. Et **Δ**-mærkat angiver delta-scanninger; **Seneste** markerer den nyeste session.
+- Klik på en række for at indlæse den pågældende sessions resultater i gitteret. Et historikbanner erstatter statuslinjen med sessionens oplysninger.
+- Klik på **Seneste scanning** i banneret for at vende tilbage til den nyeste session.
+- Start af en ny scanning afslutter automatisk historiktilstanden og skifter til live-resultater.
+
+Alle filtre, eksporter og dispositionsmærkning fungerer normalt, mens du gennemser tidligere sessioner.
+
 ---
 
 ## 6. Gennemgang og mærkning af fund
@@ -359,7 +371,10 @@ Du kan give en DPO, skoleleder eller compliance-koordinator skrivebeskyttet adga
 Klik på **🔗**-knappen øverst til højre i topbjælken for at åbne delingspanelet.
 
 1. Angiv eventuelt en **Betegnelse** for at identificere, hvem linket er til (f.eks. "DPO-gennemgang april 2026").
-2. Vælg et **Rolleomfang** — **Alle roller**, **Ansatte** eller **Elever**. Et afgrænset link begrænser modtageren til elementer tilhørende den valgte rollegruppe; de kan ikke se andre elementer, og rollefilteret er låst i deres visning.
+2. Vælg et **Omfang**:
+   - **Alle roller** — modtageren ser alle fundne elementer.
+   - **Ansatte** / **Elever** — modtageren ser kun elementer tilhørende den valgte rollegruppe. Rollefilteret er låst i deres visning.
+   - **Bruger** — modtageren ser kun elementer tilhørende en bestemt medarbejder. Vælg personen fra søgefeltet; scanneren matcher automatisk både deres M365- og Google Workspace-e-mailadresser. Brug denne mulighed, når du vil give en enkelt medarbejder adgang til sine egne scanningsresultater.
 3. Vælg en **Udløbsdato** — 7 dage, 30 dage, 90 dage, 1 år eller Aldrig.
 4. Klik på **Opret**. Der genereres et unikt link: `http://host:5100/view?token=…`
 5. Klik på **Kopiér** for at kopiere linket til udklipsholderen, og send det til gennemgangeren.
@@ -549,4 +564,4 @@ Ja. Brug **🔗 Del**-knappen til at oprette et skrivebeskyttet viewer-link elle
 
 ---
 
-*GDPR Scanner v1.6.14 — teknisk opsætning og konfiguration: se README.md*
+*GDPR Scanner v1.6.17 — teknisk opsætning og konfiguration: se README.md*

docs/manuals/MANUAL-EN.md

@@ -1,6 +1,6 @@
 # GDPR Scanner — User Manual
 
-Version 1.6.15
+Version 1.6.17
 
 ---
 
@@ -228,6 +228,18 @@ Use the filter bar above the results to narrow down what you see:
 - **Risk dropdown** — show only Art. 9, photos, GPS, or high-risk items.
 - **Role dropdown** — show only **Ansatte** (staff) or **Elever** (students). Also scopes exports: clicking **Excel** or **Art.30** while a role is selected produces a report containing only that group, with `_elever` or `_ansatte` appended to the filename.
 
+### Browsing past scan sessions
+
+Once a scan has completed, you can review results from any earlier scan session without running a new scan.
+
+- Click the **Sessions** button in the history banner (which appears above the results grid after a scan completes) to open the session picker.
+- Each row shows the date and time, which sources were scanned, and how many items were flagged. A **Δ** badge marks delta scans; **Latest** marks the most recent session.
+- Click any row to load that session's results into the grid. A history banner replaces the progress bar, showing the session details.
+- Click **Latest scan** in the banner to jump back to the most recent session.
+- Starting a new scan automatically exits history mode and switches back to live results.
+
+All filters, exports, and disposition tagging work normally while browsing past sessions.
+
 ---
 
 ## 6. Reviewing and Tagging Results
@@ -359,7 +371,10 @@ You can give a DPO, school principal, or compliance coordinator read-only access
 Click the **🔗** button in the top-right of the top bar to open the Share panel.
 
 1. Optionally enter a **Label** to identify who the link is for (e.g. "DPO review April 2026").
-2. Choose a **Role scope** — **All roles**, **Ansatte** (staff only), or **Elever** (students only). A scoped link restricts the recipient to items belonging to that role group; they cannot see any other items, and the role filter is locked in their view.
+2. Choose a **Scope**:
+   - **All roles** — the recipient sees all flagged items.
+   - **Ansatte** / **Elever** — the recipient sees only items belonging to that role group. The role filter is locked in their view.
+   - **User** — the recipient sees only the items belonging to a specific employee. Select the person from the search box; the scanner matches both their M365 and Google Workspace email addresses automatically. Use this when you want to give an individual employee access to their own scan results.
 3. Choose an **Expiry** — 7 days, 30 days, 90 days, 1 year, or Never.
 4. Click **Create**. A unique link is generated: `http://host:5100/view?token=…`
 5. Click **Copy** to copy the link to your clipboard, then send it to the reviewer.
@@ -549,4 +564,4 @@ Yes. Use the **🔗 Share** button to create a read-only viewer link or set a Vi
 
 ---
 
-*GDPR Scanner v1.6.14 — for technical setup and configuration see README.md*
+*GDPR Scanner v1.6.17 — for technical setup and configuration see README.md*