Fix NextGraph write persistence: use private_store_id as useShape scope

Writes (doc_create, orm_frontend_update) failed with RepoNotFound because
useShape with did:ng:i scope doesn't open individual repos in the verifier's
cache. Switched to did🆖${session.private_store_id} as both scope and
@graph, matching the expense-tracker-rdf pattern. This opens the private
store repo via orm_start_graph, making it available for subsequent writes.

Also adds wallet login step to ensureAuth so the verifier bootstraps repos
from the remote broker into localStorage on first run.

Key changes:
- useShapeWithDefaults accepts storeNuri param (private store NURI)
- FestipodDataContext.useNgData() passes private store scope
- ensureGraphNuri() simplified: reuse existing @graph or private_store_id
- ngBootstrap uses ensureGraphNuri + flushAndWait between ORM adds
- harness-ng.tsx uses private store scope for test bridge shapes
- hooks.ts: wallet creation logs in to bootstrap verifier repos
- E2e steps for data loading and persistence verification

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

.project/knowledge/data-layer-testing.md

@@ -31,14 +31,18 @@ Cucumber steps → Playwright (Chromium, persistent profile)
 
 Fully automated — no manual interaction required. CI-ready.
 
-### First Run (wallet creation)
+### First Run (wallet creation + bootstrap)
 1. `BeforeAll` detects no `.wallet-ready` marker in `.playwright-profile/`
 2. Launches headless Chromium with persistent profile
 3. Navigates to `https://nextgraph.eu/` → clicks "Create Wallet"
 4. Redirected to `account.nextgraph.eu` → clicks "I accept" (ToS)
 5. Redirected back → fills username/password form → submits
-6. Wallet created in localStorage → marker written
-7. This is also a real test of the app's auth/login feature
+6. Wallet created in localStorage
+7. **Logs in to the wallet** — this triggers the verifier bootstrap from the remote broker, populating localStorage with repo data
+8. Waits 10s for bootstrap to complete, then closes context
+9. Marker written
+
+Step 7 is critical: the NextGraph verifier starts with an empty `repos` HashMap. On first login, `verifier.sync()` bootstraps from the remote broker, downloading repo data (including store repos). This data is saved to localStorage via `session_save`. Without this initial login, subsequent sessions would have empty repos and all writes would fail with `RepoNotFound`.
 
 ### Subsequent Runs (automated login)
 1. Marker found → skip wallet creation
@@ -73,7 +77,7 @@ Required because broker at `nextgraph.eu` (public) loads harness from `http://12
 - Shut down in `AfterAll`
 
 ### ORM Subscriptions
-Harness creates subscriptions for all three shapes with scope `did:ng:i` (private store):
+Harness creates subscriptions for all three shapes with scope `did:ng:${session.private_store_id}` (opens the store repo for reads AND writes):
 - `FpEventShapeType` → events
 - `FpUserProfileShapeType` → users
 - `FpParticipationShapeType` → participations

.project/knowledge/data-layer.md

@@ -35,6 +35,25 @@ ORM bindings in `src/shared/shapes/orm/`:
 
 Regenerate with `bun run build:orm`.
 
+## NextGraph Read/Write Pattern
+
+The app follows the same pattern as the official expense-tracker-rdf example:
+
+- **Scope**: `useShape(shapeType, `did:ng:${session.private_store_id}`)` — opens the private store repo in the verifier
+- **@graph**: `did:ng:${session.private_store_id}` — writes target the same NURI
+
+This is critical: `orm_start_graph` with the private store NURI explicitly opens the repo in the verifier's `self.repos` HashMap. Without this, `orm_frontend_update` fails with `RepoNotFound`.
+
+**Do NOT use `did:ng:i` as scope** — it subscribes to the entire user site via a special code path that doesn't open individual repos, breaking all writes.
+
+### Key files
+
+- `src/shared/hooks/useShapeWithDefaults.ts` — Accepts `storeNuri` param, passes to `useShape`
+- `src/shared/utils/ngGraph.ts` — `ensureGraphNuri()` returns `@graph` for entity creation
+- `src/shared/utils/ngBootstrap.ts` — Seeds test data using `ensureGraphNuri()` for `@graph`
+
+See [decision record](.project/decisions/2026-03-17-1600-private-store-nuri-scope.md) for why.
+
 ## Context Providers
 
 ### NextGraphContext (`src/shared/context/NextGraphContext.tsx`)