Added an events bus, and pushed OpportunitiesUpdated to WebSocket clients when the fetcher stores new opportunities

internal/events decouples the parts of JobSearch that cause events from
the parts that react to them. bus.go has Bus: Subscribe, and a synchronous
Publish that calls each handler in turn on the publisher's goroutine, so
handlers mustn't block (the hub doesn't: it queues per client). events.go
has the event types and their payloads, starting with OpportunitiesUpdated.

With fetcher.WithEvents, a save that stores new opportunities, or new
releases of stored ones, publishes OpportunitiesUpdated with their UUIDs and
counts. An opportunity whose row is only rewritten, as when it is fetched
again from the newest stored release, isn't counted as updated, and nothing
is published when nothing changed. store.SaveResult now reports
NewOpportunity for each opportunity saved.

job-search serve subscribes its WebSocket hub to the bus, so every client
gets {"type":"event","eventType":"OpportunitiesUpdated","payload":{"new":
[...],"updated":[...],"summary":{"new":n,"updated":n}}}. The Envelope gains
an eventType field, and Hub.PushEvent and Server.PushEvent send events.

internal/fetcher/fetcher_test.go

@@ -9,12 +9,14 @@ import (
 	"net/http"
 	"net/http/httptest"
 	"os"
+	"reflect"
 	"strings"
 	"sync/atomic"
 	"testing"
 	"time"
 
 	"git.avsdev.uk/Go/job-search/internal/config"
+	"git.avsdev.uk/Go/job-search/internal/events"
 	"git.avsdev.uk/Go/job-search/internal/store"
 	"git.avsdev.uk/Go/job-search/internal/types"
 	"git.avsdev.uk/Go/job-search/internal/util"
@@ -659,3 +661,79 @@ func checkAboutADayAgo(t *testing.T, updatedFrom string) {
 		t.Errorf("updatedFrom = %s; want about a day ago", updatedFrom)
 	}
 }
+
+// fetched returns the opportunities converted from body, a release package.
+func fetched(t *testing.T, body string) []*types.Opportunity {
+	t.Helper()
+	srv, _ := ftsServer(t, http.StatusOK, body)
+	opportunities, err := fetchers["FindATender"](
+		context.Background(), srv.URL, time.Now().Add(-time.Hour),
+	)
+	if err != nil {
+		t.Fatal(err)
+	}
+	return opportunities
+}
+
+// A save publishes the new opportunities and those with new releases, and
+// nothing when an opportunity is only fetched again.
+func TestSavePublishesUpdates(t *testing.T) {
+	var bus events.Bus
+	var published []events.OpportunitiesUpdatedPayload
+	bus.Subscribe(func(event events.Event) {
+		if event.Type != events.OpportunitiesUpdated {
+			t.Errorf("event type = %q", event.Type)
+		}
+		payload := event.Payload.(events.OpportunitiesUpdatedPayload)
+		published = append(published, payload)
+	})
+	f := New(
+		&config.JSCSources{},
+		WithStore(openTestStore(t)),
+		WithEvents(&bus),
+	)
+	save := func(body string) {
+		t.Helper()
+		err := f.save(context.Background(), slog.Default(), fetched(t, body))
+		if err != nil {
+			t.Fatal(err)
+		}
+	}
+	newRelease := strings.NewReplacer(
+		`"id": "r1"`, `"id": "r2"`,
+		"2026-10-01T12:00:00Z", "2026-10-02T12:00:00Z",
+	).Replace(onePackage)
+
+	save(onePackage) // new
+	save(onePackage) // fetched again: nothing published
+	save(newRelease) // a new release of a stored opportunity
+
+	want := []events.OpportunitiesUpdatedPayload{
+		{
+			New:     []string{"ocds-1"},
+			Updated: []string{},
+			Summary: events.OpportunitiesSummary{
+				New: 1,
+			},
+		},
+		{
+			New:     []string{},
+			Updated: []string{"ocds-1"},
+			Summary: events.OpportunitiesSummary{
+				Updated: 1,
+			},
+		},
+	}
+	if !reflect.DeepEqual(published, want) {
+		t.Errorf("published %+v; want %+v", published, want)
+	}
+}
+
+// Without WithEvents, a save publishes nothing and still succeeds.
+func TestSaveWithoutEvents(t *testing.T) {
+	f := New(&config.JSCSources{}, WithStore(openTestStore(t)))
+	err := f.save(context.Background(), slog.Default(), fetched(t, onePackage))
+	if err != nil {
+		t.Fatal(err)
+	}
+}