Two commits: the export overwrite-protection change, and a small dark-theme checkbox fix it surfaced. make lint / make type / make test all pass.

1. Prompt before overwriting existing files on export

Export (single) and Export All silently overwrote files that already existed at the destination, with no warning. The "Overwrite existing files" option now gates this, and the default is safe:

• Unchecked (new default): if a batch would clobber existing files, the export is gated on a prompt - Overwrite / Rename / Cancel - listing the conflicting filenames. Rename falls back to the worker's numbered-suffix auto-rename; Cancel aborts the whole export. Same behavior for single Export and Export All (all route through _run_export_tasks).
• Checked: overwrite silently, no prompt.
• The prompt carries an "Always overwrite without asking" checkbox that, when ticked with Overwrite, persists the preference (turns the Export-panel option on and the sticky default), so it stays on until turned off.

Behavior change: the overwrite default flips True → False so the warning is on by default. A previously saved "checked" preference keeps overwriting silently as before.

Implementation

• Factored the worker's output-path logic into shared, testable helpers (resolve_export_dir / resolve_export_naming / resolve_export_target_path / find_export_conflicts) so conflict detection resolves the exact path the worker writes, and refactored run_batch to reuse them.
• AppController._resolve_export_conflicts runs before dispatch; _set_overwrite_preference persists the remembered choice without touching edit history or re-rendering.
• Contact-sheet export is unchanged (already auto-renames, no fixed per-frame names to collide).

2. Visible checkboxes on the dark theme

Fusion's default checkbox indicator is nearly invisible against the app's #0D0D0D background — the unchecked "Overwrite existing files" box (and every other checkbox) blended in. Added a QCheckBox::indicator rule: a clear border + subtle fill when unchecked (brighter on hover), and an accent box with a white checkmark when checked. The checkmark is an SVG (media/icons/checkbox_check.svg, already bundled via --add-data=media), with its absolute path injected into the stylesheet at load time since QSS url() can't resolve relative paths reliably across dev and frozen runs.

Tests

• test_export_overwrite.py: output-path resolution per output-mode + filesystem conflict detection.
• test_controller.py: silent-preference path (no prompt), overwrite / rename / cancel, remember-persist, and no-conflict pass-through.

(test_export_presets.py::test_output_dir_subfolder_of_source fails on Windows due to a pre-existing os.path.join separator assumption, unrelated to this change — fails on main too.)