UX polish batch: drag-drop uploads, sign-in redirect, empty-state sweep

P2 polish batch kept visible so it doesn't rot: drag-and-drop file upload (portal + staff), drag-and-drop in the form builder, contact /sign-in already-authenticated redirect, and a final empty-state/skeleton consistency sweep across modules. Also: track skipped-test count as a release metric.