feat: portal redesign, pricing catalog, partner-staff invites

- portal: new admin/ and partner/ surfaces with full component library
  (AppLauncher, Avatar, Badge, Card, Modal, Tabs, etc.), composables,
  layouts, partner-routing middleware, and supporting server APIs
- pricing: Price schema/module with operator CRUD, pricing.vue catalog UI,
  Subscription extended with cycle/currency/perSeatAmount/seats snapshots
  for stable MRR aggregation
- partner staff: User.partnerId, invite-partner-user DTO and flow,
  /partners/:slug/users endpoints, InvitePartnerUserModal, shared
  dezky-partner-staff Authentik group
- /me: partner-aware endpoint returning user + partner context so portal
  can route between end-user and partner-admin surfaces
- tenant: seats field for portfolio displays and future MRR calculations
- operator: pricing page, signed-out page, useMe/useToast composables,
  ToastStack

apps/portal/components/MetricCell.vue

@@ -0,0 +1,32 @@
+<script setup lang="ts">
+defineProps<{ label: string; value: string; tone?: 'ok' | 'warn' | 'bad' }>()
+</script>
+
+<template>
+  <div class="cell">
+    <div class="label">{{ label }}</div>
+    <div class="value" :data-tone="tone">{{ value }}</div>
+  </div>
+</template>
+
+<style scoped>
+.cell { min-width: 0; }
+.label {
+  font-family: var(--font-mono);
+  font-size: 9px;
+  letter-spacing: 0.12em;
+  text-transform: uppercase;
+  color: var(--text-mute);
+}
+.value {
+  font-family: var(--font-mono);
+  font-size: 14px;
+  font-weight: 600;
+  margin-top: 4px;
+  font-variant-numeric: tabular-nums;
+  color: var(--text);
+}
+.value[data-tone='ok']   { color: var(--ok); }
+.value[data-tone='warn'] { color: var(--warn); }
+.value[data-tone='bad']  { color: var(--bad); }
+</style>