fix(operator,portal): env-driven sign-out URLs + host labels (no more .local in prod)

Operator sign-out hardcoded the dev Authentik end-session URL, so prod
logout landed on auth.dezky.local. Mirror the portal's env-driven pattern
(NUXT_PUBLIC_AUTH_URL/NUXT_PUBLIC_OPERATOR_URL with .local fallbacks).
Expose authUrl/operatorUrl via public runtimeConfig and use them for the
Authentik admin links and the cosmetic host labels (sidebar, eyebrows,
auth-page hints). Portal: signed-out + webmail copy now derive their hosts
from runtime config (new public.mailUrl, NUXT_PUBLIC_MAIL_URL in prod).

apps/operator/pages/pricing.vue

@@ -1,4 +1,5 @@
 <script setup lang="ts">
+const operatorHost = new URL(useRuntimeConfig().public.operatorUrl).host
 // Pricing catalog editor. Operator-only. Each (plan, cycle) is a single row
 // with three independent per-currency amounts (DKK / EUR / USD). Operator
 // types clean round numbers in each currency — no FX derivation. Empty cells
@@ -233,7 +234,7 @@ const sortedPrices = computed<PriceRow[]>(() =>
 <template>
   <div>
     <PageHeader
-      eyebrow="Operator · operator.dezky.local"
+      :eyebrow="`Operator · ${operatorHost}`"
       title="Pricing catalog"
       subtitle="One row per plan + cycle, with independent prices per currency. Editing an amount re-prices live customers on that currency at their next billing cycle (no mid-cycle charge) and applies to all new subscriptions."
     >