v2 foundation: shared contracts, app profile schema, wiring stubs

- projects: app profile columns + one app per org; project_external_git,
  deploy_targets, org_model_grants tables (migration a0f0e1d2c3b4)
- ports + fakes: RepoWorkspace, DeliveryHooks, DeployTarget, Memory,
  ModelGrants, WorkforceBootstrap; AppProfile + AppProfileRepository
- per-workstream wiring (container_org/engine/delivery), config blocks,
  empty routers, delivery worker, MCP/delivery service shells, web stubs
- admin nav derives from ADMIN_ITEMS; plan docs updated for ext4 worktrees

Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>

apps/web/src/test/command-palette.test.tsx

@@ -45,10 +45,10 @@ describe("command palette", () => {
     openWithShortcut();
 
     fireEvent.change(screen.getByLabelText("جست‌وجوی بخش‌ها"), {
-      target: { value: "پروژه" },
+      target: { value: "اپلیکیشن" },
     });
 
-    expect(screen.getByRole("button", { name: /پروژه/ })).toBeInTheDocument();
+    expect(screen.getByRole("button", { name: /اپلیکیشن/ })).toBeInTheDocument();
     expect(screen.queryByRole("button", { name: /داشبورد/ })).not.toBeInTheDocument();
   });