feat: let guests publish a CommunityRule and claim it on this browser later

Finalize no longer requires a magic link. Guest rows stay off the catalog until sign-in on the same browser attaches ownership, and the login modal kebab no longer acts as a second close.

Co-authored-by: Cursor <cursoragent@cursor.com>

tests/pages/legal.test.tsx

@@ -111,6 +111,7 @@ describe("legal document pages", () => {
       screen.getByText(/There are no advertising or analytics cookies to turn off/),
     ).toBeInTheDocument();
     expect(screen.getByText(/cr_session/)).toBeInTheDocument();
+    expect(screen.getByText(/cr_rule_claim/)).toBeInTheDocument();
     expect(
       screen.getAllByRole("link", { name: "Privacy Policy" })[0],
     ).toHaveAttribute("href", "/privacy");