feat: Phase 1 — extract the client (web SPA + desktop) to dtoro/oikos-web

Problem: the hexagonal refactor churns the backend tree for nine more
phases; the UI delivery stack (web/ SPA, cmd/desktop Wails wrapper,
compose/web image) must move to its own repo first so doc/layout
rewrites land once on a backend-only tree.

Change:
- New repo git.hubris.network/dtoro/oikos-web (v0.33.0): web/, desktop/
  (updateURL repointed to oikos-web releases), compose/, own CI (web +
  desktop jobs), own deploy script (CI-green gate, TOCTOU guard,
  version-tagged images, prune-to-3), own webhook receiver on :9798 +
  launchd unit, own compose project publishing the same 8091:80.
- Cutover executed on mac-mini in order: oikos stack's web service
  stopped+removed, oikos-web project brought up on 8091; outer Caddy
  untouched (targets the published port) — serving + Authentik flow +
  /wails 404 quirk verified post-cutover.
- Stripped from oikos: web/, cmd/desktop/, compose/web/, desktop CI
  workflow, ci.yml web job, Makefile ui/desktop/desktop-package/install
  targets, the compose web service, oikos-web from deploy.sh's fallback
  prune list; wails + go-keyring dropped from go.mod, vendor synced.
- README / CONTRIBUTING / AGENTS.md / .agents dev+operations docs now
  point at the new repo; mbse + mascot design docs carry a path note.

Risk: production SPA serving depends on the new pipeline now; rollback
is versioned-image re-up of the old web service from a pre-split
checkout (port 8091). Desktop builds installed before the split still
check dtoro/oikos releases — one manual reinstall, noted in the
oikos-web release notes.

Verification: go vet, make test (race), make generate-check, golangci
(no new findings; baseline down 400→365); post-cutover curls —
localhost:8091 200, /wails/runtime.js 404, outer Caddy 302 Authentik.

web/node_modules/eslint/conf/globals.js

@@ -0,0 +1,169 @@
+/**
+ * @fileoverview Globals for ecmaVersion/sourceType
+ * @author Nicholas C. Zakas
+ */
+
+"use strict";
+
+//-----------------------------------------------------------------------------
+// Globals
+//-----------------------------------------------------------------------------
+
+const commonjs = {
+	exports: true,
+	global: false,
+	module: false,
+	require: false,
+};
+
+const es3 = {
+	Array: false,
+	Boolean: false,
+	constructor: false,
+	Date: false,
+	decodeURI: false,
+	decodeURIComponent: false,
+	encodeURI: false,
+	encodeURIComponent: false,
+	Error: false,
+	escape: false,
+	eval: false,
+	EvalError: false,
+	Function: false,
+	hasOwnProperty: false,
+	Infinity: false,
+	isFinite: false,
+	isNaN: false,
+	isPrototypeOf: false,
+	Math: false,
+	NaN: false,
+	Number: false,
+	Object: false,
+	parseFloat: false,
+	parseInt: false,
+	propertyIsEnumerable: false,
+	RangeError: false,
+	ReferenceError: false,
+	RegExp: false,
+	String: false,
+	SyntaxError: false,
+	toLocaleString: false,
+	toString: false,
+	TypeError: false,
+	undefined: false,
+	unescape: false,
+	URIError: false,
+	valueOf: false,
+};
+
+const es5 = {
+	...es3,
+	JSON: false,
+};
+
+const es2015 = {
+	...es5,
+	ArrayBuffer: false,
+	DataView: false,
+	Float32Array: false,
+	Float64Array: false,
+	Int16Array: false,
+	Int32Array: false,
+	Int8Array: false,
+	Intl: false,
+	Map: false,
+	Promise: false,
+	Proxy: false,
+	Reflect: false,
+	Set: false,
+	Symbol: false,
+	Uint16Array: false,
+	Uint32Array: false,
+	Uint8Array: false,
+	Uint8ClampedArray: false,
+	WeakMap: false,
+	WeakSet: false,
+};
+
+// no new globals in ES2016
+const es2016 = {
+	...es2015,
+};
+
+const es2017 = {
+	...es2016,
+	Atomics: false,
+	SharedArrayBuffer: false,
+};
+
+// no new globals in ES2018
+const es2018 = {
+	...es2017,
+};
+
+// no new globals in ES2019
+const es2019 = {
+	...es2018,
+};
+
+const es2020 = {
+	...es2019,
+	BigInt: false,
+	BigInt64Array: false,
+	BigUint64Array: false,
+	globalThis: false,
+};
+
+const es2021 = {
+	...es2020,
+	AggregateError: false,
+	FinalizationRegistry: false,
+	WeakRef: false,
+};
+
+const es2022 = {
+	...es2021,
+};
+
+const es2023 = {
+	...es2022,
+};
+
+const es2024 = {
+	...es2023,
+};
+
+const es2025 = {
+	...es2024,
+	Float16Array: false,
+	Iterator: false,
+};
+
+const es2026 = {
+	...es2025,
+	AsyncDisposableStack: false,
+	DisposableStack: false,
+	SuppressedError: false,
+};
+
+//-----------------------------------------------------------------------------
+// Exports
+//-----------------------------------------------------------------------------
+
+module.exports = {
+	commonjs,
+	es3,
+	es5,
+	es2015,
+	es2016,
+	es2017,
+	es2018,
+	es2019,
+	es2020,
+	es2021,
+	es2022,
+	es2023,
+	es2024,
+	es2025,
+	es2026,
+};