Fix dict kwarg evaluation in renderComponentDOM, no-cache static in dev

Dict values (e.g. {:X-CSRFToken csrf}) passed as component kwargs were
not being evaluated through sxEval — symbols stayed unresolved in the DOM.
Also add Cache-Control: no-cache headers for /static/ in dev mode so
browser always fetches fresh JS/CSS without needing hard refresh.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

shared/static/scripts/sx.js

@@ -1286,8 +1286,8 @@
             kwargs[args[i].name] = sxEval(v, env);
           }
         } else {
-          // Data arrays, dicts, etc — pass through as-is
-          kwargs[args[i].name] = v;
+          // Data arrays, dicts, etc — evaluate in caller's env
+          kwargs[args[i].name] = sxEval(v, env);
         }
         i += 2;
       } else {