fix: Alpine.js x-data broken by inner double quotes + API list response crash

- Extract JSON data to <script> tags instead of tojson_attr in x-data attributes
- Remove literal " from CSS selector in x-data (meta[name=csrf-token])
- Move Alpine.js defer script after extra_js block in base.html
- Add isinstance(resp, dict) guard before .get("error") in measure.py and maker.py

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

client/templates/measure/select_recipe.html

@@ -2,9 +2,10 @@
 {% block title %}{{ _('Seleziona Ricetta') }} — TieMeasureFlow{% endblock %}
 
 {% block content %}
+<script>window.__selectRecipeData = {{ recipes|tojson }};</script>
 <div class="container mx-auto px-4 sm:px-6 lg:px-8 py-8 max-w-7xl"
      x-data="{
-       recipes: {{ recipes|tojson_attr }},
+       recipes: window.__selectRecipeData,
        search: '{{ auto_recipe_code }}',
        lot_number: '{{ auto_lot }}',
        serial_number: '{{ auto_serial }}',