feat: portal redesign, pricing catalog, partner-staff invites

- portal: new admin/ and partner/ surfaces with full component library
  (AppLauncher, Avatar, Badge, Card, Modal, Tabs, etc.), composables,
  layouts, partner-routing middleware, and supporting server APIs
- pricing: Price schema/module with operator CRUD, pricing.vue catalog UI,
  Subscription extended with cycle/currency/perSeatAmount/seats snapshots
  for stable MRR aggregation
- partner staff: User.partnerId, invite-partner-user DTO and flow,
  /partners/:slug/users endpoints, InvitePartnerUserModal, shared
  dezky-partner-staff Authentik group
- /me: partner-aware endpoint returning user + partner context so portal
  can route between end-user and partner-admin surfaces
- tenant: seats field for portfolio displays and future MRR calculations
- operator: pricing page, signed-out page, useMe/useToast composables,
  ToastStack

apps/portal/components/StatusDot.vue

@@ -0,0 +1,22 @@
+<script setup lang="ts">
+withDefaults(
+  defineProps<{ color?: string; size?: number; glow?: boolean }>(),
+  { color: 'var(--ok)', size: 8, glow: true },
+)
+</script>
+
+<template>
+  <span
+    class="dot"
+    :style="{
+      width: size + 'px',
+      height: size + 'px',
+      background: color,
+      boxShadow: glow ? `0 0 0 3px ${color}22` : 'none',
+    }"
+  />
+</template>
+
+<style scoped>
+.dot { display: inline-block; border-radius: 999px; flex-shrink: 0; }
+</style>