DRY pass #2, batch 6, F19: one confirm dialog, one permission vocabulary, one #name (#5372)

- Panel.kt ConfirmDialog (moved from TagsScreen, where it was private):
  the delete-forever dialog, the sync disconnect and the tag dialogs all
  ask through it now.
- strings.xml: editor_cancel and tags_cancel were both "Cancel"; they are
  one cancel string.
- NoteAccess carries the core's permission string (wire). The access
  lookup, the share sheet's choices and the board's draft read it from
  there instead of writing "owner"/"edit"/"view" again.
- hashtag(name): the #-prefixed tag name that TagsScreen, the card and the
  editor chips each wrote.

Formatted and checked with ktlint in the CI image.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

android/app/src/main/res/values/strings.xml

@@ -65,7 +65,7 @@
     <string name="editor_unarchive">Unarchive</string>
     <string name="editor_trash">Move to trash</string>
     <string name="editor_restore">Restore</string>
-    <string name="editor_cancel">Cancel</string>
+    <string name="cancel">Cancel</string>
     <string name="editor_share">Share…</string>
 
     <!-- Sharing (#5175). Shares live on the server, so the sheet says so when this
@@ -159,7 +159,6 @@
          said here rather than left as a surprise. -->
     <string name="tags_delete_from_text">Tags written as #tag in a note come back when that note is next edited.</string>
 
-    <string name="tags_cancel">Cancel</string>
 
     <!-- Pickers -->
     <string name="label_picker_title">Tags</string>