Small WCAG 2.1 A/AA failures in the sharing sidebar, text editor, search preview and space quota #3794

Initial Checklist

• I understand this is a bug report and questions should be posted in the Community Discussions
• I searched issues and couldn’t find anything (or linked relevant results below)

Bug Description

An accessibility audit (axe-core with the WCAG 2.1 A/AA rules of our a11y e2e tests, plus keyboard checks) found several small WCAG 2.1 A/AA failures that each need only a one- to three-line change:

• Link password lock icon in the sharing sidebar: aria-label on a <span> without a role (4.1.2), SideBar/Shares/Links/ListItem.vue
• Yjs status indicator in the text editor: aria-label on a <div> without a role (4.1.2), Yjs/YjsStatusIndicator.vue
• Text editor (and the read-only text viewer on public single-file links): role="textbox" without an accessible name (4.1.2), web-app-text-editor/src/App.vue
• Search bar preview: role="menu" list with plain list items (1.3.1), web-app-search/src/portals/SearchBar.vue
• Yjs collaborator avatars: white initials on colors with too little contrast, down to ~1.5:1 (1.4.3), services/yjs/src/lib/color.ts
• Space quota bar: role="progressbar" without an accessible name (1.1.1), SpaceQuota.vue / OcProgress.vue

Reproduction Steps

1. Open the views above (sharing sidebar with a password link, text editor, search bar preview, project space with quota).
2. Run axe-core with the tags wcag2a, wcag2aa, wcag21a, wcag21aa.

Expected Outcome

No violations for these elements.

Actual Outcome

axe reports aria-prohibited-attr, aria-input-field-name, aria-required-children, listitem, color-contrast and aria-progressbar-name for these elements.