Add loading state for bounty list

[chriszlr]

Closes #18

Summary

• add a reusable bounty list loader that shows an accessible loading spinner while the fetch is in progress
• render loaded, empty, and graceful error states after the API call resolves
• escape rendered bounty content and cover the loading/error paths with tests

Test plan

• npm test