Harden JSON storage (atomic writes + crash-safe loads) + suggestions lightbulb

- storage.py: atomic save_json (temp+fsync+os.replace) and load_json that
  survives missing/corrupt files (moves corrupt aside). Closes #11/#12.
- route all data modules + app.py helpers through storage (closes #31 core);
  fixes mutable DEFAULT_FUNDS/DEFAULT_CARS return (#23).
- gunicorn --workers 1 --threads 4 to remove the write race (#13); strip
  Dockerfile template scaffolding (#40).
- base.html: 💡 suggestions link in the shared nav (shows on every page).

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>

income.py

@@ -1,6 +1,7 @@
 import json
 import os
 from datetime import date
+from storage import load_json, save_json
 
 DATA_DIR = os.environ.get("DATA_DIR", os.path.join(os.path.dirname(__file__), "data"))
 INCOME_FILE = os.path.join(DATA_DIR, "income_log.json")
@@ -21,15 +22,11 @@ OWNER_COLORS = {
 
 
 def load_income_log():
-    if os.path.exists(INCOME_FILE):
-        with open(INCOME_FILE) as f:
-            return json.load(f)
-    return []
+    return load_json(INCOME_FILE, [])
 
 
 def save_income_log(log):
-    with open(INCOME_FILE, "w") as f:
-        json.dump(log, f, indent=2)
+    save_json(INCOME_FILE, log)
 
 
 def month_key(year, month):