fix(settings): make settings read failures foreground and recoverable

A family of settings surfaces rendered a failed read as a bare
text-destructive line with no way to recover: the security sessions,
trusted-devices and activity cards, the coach memory and reminders
sections, the about-me section, and the document link/share pickers. Swap
each to the shared QueryErrorRow primitive with a retry control. The suite
covering the statically renderable members was watched fail first against
the bare lines; the two portaled pickers take the same swap.

src/components/documents/document-link-picker.tsx

@@ -20,6 +20,7 @@ import { toast } from "sonner";
 import { Input } from "@/components/ui/input";
 import { ResponsiveSheet } from "@/components/ui/responsive-sheet";
 import { Skeleton } from "@/components/ui/skeleton";
+import { QueryErrorRow } from "@/components/ui/query-error-row";
 import { apiGet, apiPost } from "@/lib/api/api-fetch";
 import { useFormatters, useTranslations } from "@/lib/i18n/context";
 import { invalidateKeys, queryKeys } from "@/lib/query-keys";
@@ -132,9 +133,10 @@ export function DocumentLinkPicker({
             ))}
           </div>
         ) : list.isError ? (
-          <p role="alert" className="text-destructive text-sm">
-            {t("documents.list.loadError")}
-          </p>
+          <QueryErrorRow
+            message={t("documents.list.loadError")}
+            onRetry={() => list.refetch()}
+          />
         ) : documents.length === 0 ? (
           <p className="text-muted-foreground py-4 text-center text-sm">
             {t("documents.linkPicker.empty")}