feat: portal redesign, pricing catalog, partner-staff invites

- portal: new admin/ and partner/ surfaces with full component library
  (AppLauncher, Avatar, Badge, Card, Modal, Tabs, etc.), composables,
  layouts, partner-routing middleware, and supporting server APIs
- pricing: Price schema/module with operator CRUD, pricing.vue catalog UI,
  Subscription extended with cycle/currency/perSeatAmount/seats snapshots
  for stable MRR aggregation
- partner staff: User.partnerId, invite-partner-user DTO and flow,
  /partners/:slug/users endpoints, InvitePartnerUserModal, shared
  dezky-partner-staff Authentik group
- /me: partner-aware endpoint returning user + partner context so portal
  can route between end-user and partner-admin surfaces
- tenant: seats field for portfolio displays and future MRR calculations
- operator: pricing page, signed-out page, useMe/useToast composables,
  ToastStack

apps/portal/composables/useNotificationDrawer.ts

@@ -0,0 +1,29 @@
+// Notification drawer open state + unread count. The drawer is mounted once
+// in the default layout; the topbar bell button toggles it.
+
+import { notifications as fixture } from '~/data/notifications'
+
+const open = ref(false)
+const items = ref(fixture)
+
+export const useNotificationDrawer = () => {
+  const unreadCount = computed(() => items.value.filter((n) => !n.read).length)
+
+  return {
+    open,
+    items,
+    unreadCount,
+    show: () => {
+      open.value = true
+    },
+    hide: () => {
+      open.value = false
+    },
+    toggle: () => {
+      open.value = !open.value
+    },
+    markAllRead: () => {
+      items.value = items.value.map((n) => ({ ...n, read: true }))
+    },
+  }
+}