feat: portal redesign, pricing catalog, partner-staff invites

- portal: new admin/ and partner/ surfaces with full component library
  (AppLauncher, Avatar, Badge, Card, Modal, Tabs, etc.), composables,
  layouts, partner-routing middleware, and supporting server APIs
- pricing: Price schema/module with operator CRUD, pricing.vue catalog UI,
  Subscription extended with cycle/currency/perSeatAmount/seats snapshots
  for stable MRR aggregation
- partner staff: User.partnerId, invite-partner-user DTO and flow,
  /partners/:slug/users endpoints, InvitePartnerUserModal, shared
  dezky-partner-staff Authentik group
- /me: partner-aware endpoint returning user + partner context so portal
  can route between end-user and partner-admin surfaces
- tenant: seats field for portfolio displays and future MRR calculations
- operator: pricing page, signed-out page, useMe/useToast composables,
  ToastStack

apps/portal/components/PageHeader.vue

@@ -0,0 +1,47 @@
+<script setup lang="ts">
+defineProps<{ eyebrow?: string; title: string; subtitle?: string }>()
+</script>
+
+<template>
+  <header class="page-header">
+    <div class="lhs">
+      <Eyebrow v-if="eyebrow">{{ eyebrow }}</Eyebrow>
+      <h1>{{ title }}</h1>
+      <p v-if="subtitle">{{ subtitle }}</p>
+    </div>
+    <div v-if="$slots.actions" class="rhs">
+      <slot name="actions" />
+    </div>
+  </header>
+</template>
+
+<style scoped>
+.page-header {
+  display: flex;
+  align-items: flex-end;
+  justify-content: space-between;
+  gap: 24px;
+  padding: 32px 40px 24px 40px;
+  border-bottom: 1px solid var(--border);
+}
+
+.lhs { min-width: 0; }
+
+h1 {
+  font-family: var(--font-display);
+  font-weight: 600;
+  font-size: 32px;
+  letter-spacing: -0.025em;
+  margin: 8px 0 0 0;
+  line-height: 1.05;
+}
+
+p {
+  margin: 8px 0 0 0;
+  color: var(--text-mute);
+  font-size: 14px;
+  max-width: 640px;
+}
+
+.rhs { display: flex; gap: 8px; flex-shrink: 0; }
+</style>