docs: update AGENTS.md and README.md with favorites sync, expired listings flow, token refresh

AGENTS.md

@@ -62,7 +62,8 @@ js/
 │   ├── crypto.js       # NaCl Encryption
 │   ├── currency.js     # XMR/Fiat Umrechnung
 │   ├── pow-captcha.js  # Proof-of-Work Captcha (Challenge/Verify)
-│   └── btcpay.js       # BTCPay Server Integration (Invoice, Checkout, Webhook)
+│   ├── btcpay.js       # BTCPay Server Integration (Invoice, Checkout, Webhook)
+│   └── favorites.js    # Favoriten-Service (localStorage + Directus Sync)
 └── components/
     ├── app-shell.js    # Layout, registriert Routes
     ├── app-header.js   # Header (Theme-Toggle, Lang-Dropdown, Profil-Dropdown)
@@ -142,14 +143,16 @@ locales/
 5. ~~TweetNaCl self-hosted~~ ✅ In `js/vendor/`
 6. ~~Chat-Crypto fix~~ ✅ `box.before` + `secretbox`
 7. ~~Payment-Integration mit BTCpay Server~~ ✅ Proxy auf `pow.dgray.io`, Frontend-Service `btcpay.js`
-8. Reputation-System (5/15/50 Deals Stufen)
-9. Push-Benachrichtigungen für neue Nachrichten
+8. ~~Favoriten Directus Sync~~ ✅ FavoritesService mit Union-Merge bei Login
+9. ~~Expired Listings~~ ✅ Directus Flow (alle 15 Min), Status-Badges auf Cards
+10. Reputation-System (5/15/50 Deals Stufen)
+11. Push-Benachrichtigungen für neue Nachrichten
 
 ## Directus Berechtigungen (Public-Rolle)
 
 | Collection | Read | Create | Update | Hinweise |
 |------------|------|--------|--------|----------|
-| `listings` | ✓ | ✓ | - | Nur `status=published` lesen |
+| `listings` | ✓ | ✓ | ✓ | Nur `status=published` lesen, Update nur `views` (Public) |
 | `listings_files` | ✓ | ✓ | - | Junction-Table für Bilder |
 | `directus_files` | ✓ | ✓ | - | Für Assets/Bilder |
 | `categories` | ✓ | - | - | Nur `status=published` |
@@ -158,6 +161,13 @@ locales/
 | `languages` | ✓ | - | - | Für Sprachen-Liste |
 | `conversations` | ✓ | ✓ | ✓ | Filter via `participant_hash`, Update nur `status` |
 | `messages` | ✓ | ✓ | - | Filter via `conversation` ID |
+| `favorites` | ✓ | ✓ | - | User-Rolle: Filter `user = $CURRENT_USER`, Delete erlaubt |
+
+### Directus Flows
+
+| Flow | Trigger | Aktion |
+|------|---------|--------|
+| Archive Expired Listings | Schedule `*/15 * * * *` | `status → archived` wenn `expires_at < NOW` |
 
 Siehe `docs/DIRECTUS-SCHEMA.md` für vollständiges Schema.