fix(icons): repair the FA5 generator and drop the 404 font references

generate-fa5-icons.php read fa-{brands,regular,solid}.svg from
webfonts/, but only woff/woff2 ship with the theme, so the generator
died on file_get_contents() and the committed fa5-icons.php could not
be regenerated from what the theme actually distributes.

Decode the style split from each shipped woff's cmap table instead.
The split has to come from the font: FA5 assigns different drawings to
the same codepoint per style, so fas/far/fab membership is unanswerable
from the CSS alone. Output is byte-identical to the committed catalog
(1001/151/456), so the picker is unaffected.

all.min.css also declared eot / eot?#iefix / ttf / svg fallbacks for all
three families while webfonts/ holds only woff2 + woff, so a browser
that stops at woff requested six files that do not exist. Add
tools/strip-fa5-legacy-fonts.mjs to keep the src: list to what ships;
it is idempotent and touches nothing but the @font-face blocks.

tools/admin-contract-report.json

@@ -1,5 +1,5 @@
 {
-    "generated_at": "2026-10-29T05:44:00+00:00",
+    "generated_at": "2026-11-01T03:45:46+00:00",
     "errors": [],
     "warnings": [
         "customPage tools-update section 'tools/update' not in PHP schema (ok if pure operational page)",
@@ -258,39 +258,39 @@
         "entry": true,
         "missing_chunks": [],
         "chunks": [
-            "SchemaPage.BBTFBTmo.js",
-            "vendor-vue.AXlcobq-.js",
-            "FaIcon.Cta3HYOc.js",
-            "useCollapsibleItems.BqcC9pDK.js",
-            "vendor-draggable.CsbWt1CM.js",
-            "FaIconPicker.DJI1XtMq.js",
+            "SchemaPage.BM05qq7c.js",
+            "vendor-vue.CibbKclz.js",
+            "FaIcon.DB-L86Cm.js",
+            "useCollapsibleItems.B7EjDmsr.js",
+            "vendor-draggable.CJPlJ2VA.js",
+            "FaIconPicker.BFlucdpY.js",
             "shared-api.GLIRMK1p.js",
-            "vendor-misc.DSSPvhm2.js",
-            "AksColorPicker.JO2GmxwS.js",
-            "sortable-options.Do4PkQoR.js",
+            "vendor-misc.DkFG_sHo.js",
+            "AksColorPicker.YAbprujg.js",
+            "sortable-options.eXkhlrfL.js",
             "level.E3ANSDAX.js",
             "badge.ClviT45t.js",
-            "vendor-naive.DgdCsaiA.js",
-            "DeferredPage.CDpa6_lq.js",
-            "NativeOpsRedirect.CD8j4uaH.js",
-            "FloatingButtonsSettings.BI3xnao1.js",
-            "PageHeader.C1t645NL.js",
-            "FooterTabbarSettings.DcDH4CdV.js",
-            "PostPageSettings.CIkb2bLS.js",
-            "CommentSettings.d47RErzk.js",
-            "PermissionsCapabilities.eEUosHCJ.js",
-            "CmsCredits.DUise9Hl.js",
-            "ThemeInfoPage.DuqoCync.js",
-            "ThemeAuthorizationPage.BDGht6JA.js",
-            "DocsPage.CBhfO0JX.js",
-            "UsersVerify.CWq6m0ZY.js",
-            "UsersLevel.BnvrTSj0.js",
-            "UsersBadge.Cv_yOzWA.js",
-            "UsersWechatTemplate.BGKwGvbY.js",
-            "UsersTicket.B_nhzy9S.js",
-            "ToolsImportExport.CuVI1mrN.js",
-            "ToolsHealth.BT7gJFVm.js",
-            "ToolsUpdate.59iH8s4m.js"
+            "vendor-naive.Dfu2WQKq.js",
+            "DeferredPage.DbbPIOR7.js",
+            "NativeOpsRedirect.GFQhzjCJ.js",
+            "FloatingButtonsSettings.DYWR59AW.js",
+            "PageHeader.UHsfBDVL.js",
+            "FooterTabbarSettings.D8ujMgd9.js",
+            "PostPageSettings.Bhei4Dk4.js",
+            "CommentSettings.Ct-HES9S.js",
+            "PermissionsCapabilities.DXXFzINq.js",
+            "CmsCredits.DESOnIkP.js",
+            "ThemeInfoPage.D5AogccB.js",
+            "ThemeAuthorizationPage.MnnPj70n.js",
+            "DocsPage.UUs_OZP9.js",
+            "UsersVerify.Dab-auoO.js",
+            "UsersLevel.B-jXEukF.js",
+            "UsersBadge.DVCEC3QE.js",
+            "UsersWechatTemplate.DHoNsqm_.js",
+            "UsersTicket.DcwmQE5D.js",
+            "ToolsImportExport.C-XhCKwl.js",
+            "ToolsHealth.DNZ1YaWo.js",
+            "ToolsUpdate.38p6GYou.js"
         ]
     }
 }