feat: Phase 1 — extract the client (web SPA + desktop) to dtoro/oikos-web

Problem: the hexagonal refactor churns the backend tree for nine more
phases; the UI delivery stack (web/ SPA, cmd/desktop Wails wrapper,
compose/web image) must move to its own repo first so doc/layout
rewrites land once on a backend-only tree.

Change:
- New repo git.hubris.network/dtoro/oikos-web (v0.33.0): web/, desktop/
  (updateURL repointed to oikos-web releases), compose/, own CI (web +
  desktop jobs), own deploy script (CI-green gate, TOCTOU guard,
  version-tagged images, prune-to-3), own webhook receiver on :9798 +
  launchd unit, own compose project publishing the same 8091:80.
- Cutover executed on mac-mini in order: oikos stack's web service
  stopped+removed, oikos-web project brought up on 8091; outer Caddy
  untouched (targets the published port) — serving + Authentik flow +
  /wails 404 quirk verified post-cutover.
- Stripped from oikos: web/, cmd/desktop/, compose/web/, desktop CI
  workflow, ci.yml web job, Makefile ui/desktop/desktop-package/install
  targets, the compose web service, oikos-web from deploy.sh's fallback
  prune list; wails + go-keyring dropped from go.mod, vendor synced.
- README / CONTRIBUTING / AGENTS.md / .agents dev+operations docs now
  point at the new repo; mbse + mascot design docs carry a path note.

Risk: production SPA serving depends on the new pipeline now; rollback
is versioned-image re-up of the old web service from a pre-split
checkout (port 8091). Desktop builds installed before the split still
check dtoro/oikos releases — one manual reinstall, noted in the
oikos-web release notes.

Verification: go vet, make test (race), make generate-check, golangci
(no new findings; baseline down 400→365); post-cutover curls —
localhost:8091 200, /wails/runtime.js 404, outer Caddy 302 Authentik.

web/node_modules/bits-ui/dist/bits/menubar/components/menubar-content-static.svelte

@@ -0,0 +1,38 @@
+<script lang="ts">
+	import { boxWith, mergeProps } from "svelte-toolbelt";
+	import type { MenubarContentStaticProps } from "../types.js";
+	import { MenubarContentState } from "../menubar.svelte.js";
+	import { createId } from "../../../internal/create-id.js";
+	import MenuContentStatic from "../../menu/components/menu-content-static.svelte";
+	import { noop } from "../../../internal/noop.js";
+
+	const uid = $props.id();
+
+	let {
+		ref = $bindable(null),
+		interactOutsideBehavior = "close",
+		id = createId(uid),
+		onInteractOutside = noop,
+		onCloseAutoFocus = noop,
+		onFocusOutside = noop,
+		onOpenAutoFocus = noop,
+		...restProps
+	}: MenubarContentStaticProps = $props();
+
+	const contentState = MenubarContentState.create({
+		id: boxWith(() => id),
+		interactOutsideBehavior: boxWith(() => interactOutsideBehavior),
+		ref: boxWith(
+			() => ref,
+			(v) => (ref = v)
+		),
+		onInteractOutside: boxWith(() => onInteractOutside),
+		onFocusOutside: boxWith(() => onFocusOutside),
+		onCloseAutoFocus: boxWith(() => onCloseAutoFocus),
+		onOpenAutoFocus: boxWith(() => onOpenAutoFocus),
+	});
+
+	const mergedProps = $derived(mergeProps(restProps, contentState.props));
+</script>
+
+<MenuContentStatic bind:ref {...mergedProps} {...contentState.popperProps} preventScroll={false} />

web/node_modules/bits-ui/dist/bits/menubar/components/menubar-content-static.svelte.d.ts

@@ -0,0 +1,4 @@
+import type { MenubarContentStaticProps } from "../types.js";
+declare const MenubarContentStatic: import("svelte").Component<MenubarContentStaticProps, {}, "ref">;
+type MenubarContentStatic = ReturnType<typeof MenubarContentStatic>;
+export default MenubarContentStatic;

web/node_modules/bits-ui/dist/bits/menubar/components/menubar-content.svelte

@@ -0,0 +1,38 @@
+<script lang="ts">
+	import { boxWith, mergeProps } from "svelte-toolbelt";
+	import type { MenubarContentProps } from "../types.js";
+	import { MenubarContentState } from "../menubar.svelte.js";
+	import MenuContent from "../../menu/components/menu-content.svelte";
+	import { createId } from "../../../internal/create-id.js";
+	import { noop } from "../../../internal/noop.js";
+
+	const uid = $props.id();
+
+	let {
+		ref = $bindable(null),
+		interactOutsideBehavior = "close",
+		id = createId(uid),
+		onInteractOutside = noop,
+		onFocusOutside = noop,
+		onCloseAutoFocus = noop,
+		onOpenAutoFocus = noop,
+		...restProps
+	}: MenubarContentProps = $props();
+
+	const contentState = MenubarContentState.create({
+		id: boxWith(() => id),
+		interactOutsideBehavior: boxWith(() => interactOutsideBehavior),
+		ref: boxWith(
+			() => ref,
+			(v) => (ref = v)
+		),
+		onInteractOutside: boxWith(() => onInteractOutside),
+		onFocusOutside: boxWith(() => onFocusOutside),
+		onCloseAutoFocus: boxWith(() => onCloseAutoFocus),
+		onOpenAutoFocus: boxWith(() => onOpenAutoFocus),
+	});
+
+	const mergedProps = $derived(mergeProps(restProps, contentState.props));
+</script>
+
+<MenuContent bind:ref {...mergedProps} {...contentState.popperProps} preventScroll={false} />

web/node_modules/bits-ui/dist/bits/menubar/components/menubar-content.svelte.d.ts

@@ -0,0 +1,4 @@
+import type { MenubarContentProps } from "../types.js";
+declare const MenubarContent: import("svelte").Component<MenubarContentProps, {}, "ref">;
+type MenubarContent = ReturnType<typeof MenubarContent>;
+export default MenubarContent;

web/node_modules/bits-ui/dist/bits/menubar/components/menubar-menu.svelte

@@ -0,0 +1,29 @@
+<script lang="ts">
+	import { boxWith } from "svelte-toolbelt";
+	import type { MenubarMenuProps } from "../types.js";
+	import { MenubarMenuState } from "../menubar.svelte.js";
+	import Menu from "../../menu/components/menu.svelte";
+	import { noop } from "../../../internal/noop.js";
+	import { createId } from "../../../internal/create-id.js";
+
+	const uid = $props.id();
+
+	let { value = createId(uid), onOpenChange = noop, ...restProps }: MenubarMenuProps = $props();
+
+	const menuState = MenubarMenuState.create({
+		value: boxWith(() => value),
+		onOpenChange: boxWith(() => onOpenChange),
+	});
+</script>
+
+<Menu
+	open={menuState.open}
+	onOpenChange={(open) => {
+		if (!open) menuState.root.onMenuClose();
+	}}
+	dir={menuState.root.opts.dir.current}
+	_internal_variant="menubar"
+	{...restProps}
+	_internal_should_skip_exit_animation={() =>
+		menuState.root.skipExitAnimationForMenuValue === menuState.opts.value.current}
+/>

web/node_modules/bits-ui/dist/bits/menubar/components/menubar-menu.svelte.d.ts

@@ -0,0 +1,3 @@
+declare const MenubarMenu: import("svelte").Component<import("../types.js").MenubarMenuPropsWithoutHTML, {}, "">;
+type MenubarMenu = ReturnType<typeof MenubarMenu>;
+export default MenubarMenu;

web/node_modules/bits-ui/dist/bits/menubar/components/menubar-trigger.svelte

@@ -0,0 +1,49 @@
+<script lang="ts">
+	import { attachRef, boxWith, mergeProps } from "svelte-toolbelt";
+	import type { MenubarTriggerProps } from "../types.js";
+	import { MenubarTriggerState } from "../menubar.svelte.js";
+	import { createId } from "../../../internal/create-id.js";
+	import FloatingLayerAnchor from "../../utilities/floating-layer/components/floating-layer-anchor.svelte";
+	import { DropdownMenuTriggerState } from "../../menu/menu.svelte.js";
+
+	const uid = $props.id();
+
+	let {
+		id = createId(uid),
+		disabled = false,
+		children,
+		child,
+		ref = $bindable(null),
+		...restProps
+	}: MenubarTriggerProps = $props();
+
+	const triggerState = MenubarTriggerState.create({
+		id: boxWith(() => id),
+		disabled: boxWith(() => disabled ?? false),
+		ref: boxWith(
+			() => ref,
+			(v) => (ref = v)
+		),
+	});
+
+	const dropdownTriggerState = DropdownMenuTriggerState.create(triggerState.opts);
+	const triggerAttachment = attachRef(
+		(v: HTMLElement | null) => (dropdownTriggerState.parentMenu.triggerNode = v)
+	);
+
+	const mergedProps = $derived(
+		mergeProps(restProps, triggerState.props, {
+			...triggerAttachment,
+		})
+	);
+</script>
+
+<FloatingLayerAnchor {id} ref={triggerState.opts.ref}>
+	{#if child}
+		{@render child({ props: mergedProps })}
+	{:else}
+		<button {...mergedProps}>
+			{@render children?.()}
+		</button>
+	{/if}
+</FloatingLayerAnchor>

web/node_modules/bits-ui/dist/bits/menubar/components/menubar-trigger.svelte.d.ts

@@ -0,0 +1,4 @@
+import type { MenubarTriggerProps } from "../types.js";
+declare const MenubarTrigger: import("svelte").Component<MenubarTriggerProps, {}, "ref">;
+type MenubarTrigger = ReturnType<typeof MenubarTrigger>;
+export default MenubarTrigger;

web/node_modules/bits-ui/dist/bits/menubar/components/menubar.svelte

@@ -0,0 +1,48 @@
+<script lang="ts">
+	import { boxWith, mergeProps } from "svelte-toolbelt";
+	import type { MenubarRootProps } from "../types.js";
+	import { MenubarRootState } from "../menubar.svelte.js";
+	import { createId } from "../../../internal/create-id.js";
+	import { noop } from "../../../internal/noop.js";
+
+	const uid = $props.id();
+
+	let {
+		id = createId(uid),
+		children,
+		child,
+		ref = $bindable(null),
+		value = $bindable(""),
+		dir = "ltr",
+		loop = true,
+		onValueChange = noop,
+		...restProps
+	}: MenubarRootProps = $props();
+
+	const rootState = MenubarRootState.create({
+		id: boxWith(() => id),
+		value: boxWith(
+			() => value,
+			(v) => {
+				value = v;
+				onValueChange?.(v);
+			}
+		),
+		dir: boxWith(() => dir),
+		loop: boxWith(() => loop),
+		ref: boxWith(
+			() => ref,
+			(v) => (ref = v)
+		),
+	});
+
+	const mergedProps = $derived(mergeProps(restProps, rootState.props));
+</script>
+
+{#if child}
+	{@render child({ props: mergedProps })}
+{:else}
+	<div {...mergedProps}>
+		{@render children?.()}
+	</div>
+{/if}

web/node_modules/bits-ui/dist/bits/menubar/components/menubar.svelte.d.ts

@@ -0,0 +1,4 @@
+import type { MenubarRootProps } from "../types.js";
+declare const Menubar: import("svelte").Component<MenubarRootProps, {}, "value" | "ref">;
+type Menubar = ReturnType<typeof Menubar>;
+export default Menubar;