feat: Phase 1 — extract the client (web SPA + desktop) to dtoro/oikos-web

Problem: the hexagonal refactor churns the backend tree for nine more
phases; the UI delivery stack (web/ SPA, cmd/desktop Wails wrapper,
compose/web image) must move to its own repo first so doc/layout
rewrites land once on a backend-only tree.

Change:
- New repo git.hubris.network/dtoro/oikos-web (v0.33.0): web/, desktop/
  (updateURL repointed to oikos-web releases), compose/, own CI (web +
  desktop jobs), own deploy script (CI-green gate, TOCTOU guard,
  version-tagged images, prune-to-3), own webhook receiver on :9798 +
  launchd unit, own compose project publishing the same 8091:80.
- Cutover executed on mac-mini in order: oikos stack's web service
  stopped+removed, oikos-web project brought up on 8091; outer Caddy
  untouched (targets the published port) — serving + Authentik flow +
  /wails 404 quirk verified post-cutover.
- Stripped from oikos: web/, cmd/desktop/, compose/web/, desktop CI
  workflow, ci.yml web job, Makefile ui/desktop/desktop-package/install
  targets, the compose web service, oikos-web from deploy.sh's fallback
  prune list; wails + go-keyring dropped from go.mod, vendor synced.
- README / CONTRIBUTING / AGENTS.md / .agents dev+operations docs now
  point at the new repo; mbse + mascot design docs carry a path note.

Risk: production SPA serving depends on the new pipeline now; rollback
is versioned-image re-up of the old web service from a pre-split
checkout (port 8091). Desktop builds installed before the split still
check dtoro/oikos releases — one manual reinstall, noted in the
oikos-web release notes.

Verification: go vet, make test (race), make generate-check, golangci
(no new findings; baseline down 400→365); post-cutover curls —
localhost:8091 200, /wails/runtime.js 404, outer Caddy 302 Authentik.

web/node_modules/parse5/dist/tree-adapters/default.d.ts

@@ -0,0 +1,84 @@
+import { DOCUMENT_MODE, type NS } from '../common/html.js';
+import type { Attribute, Location, ElementLocation } from '../common/token.js';
+import type { TreeAdapter, TreeAdapterTypeMap } from './interface.js';
+export interface Document {
+    /** The name of the node. */
+    nodeName: '#document';
+    /**
+     * Document mode.
+     *
+     * @see {@link DOCUMENT_MODE} */
+    mode: DOCUMENT_MODE;
+    /** The node's children. */
+    childNodes: ChildNode[];
+    /** Comment source code location info. Available if location info is enabled. */
+    sourceCodeLocation?: Location | null;
+}
+export interface DocumentFragment {
+    /** The name of the node. */
+    nodeName: '#document-fragment';
+    /** The node's children. */
+    childNodes: ChildNode[];
+    /** Comment source code location info. Available if location info is enabled. */
+    sourceCodeLocation?: Location | null;
+}
+export interface Element {
+    /** Element tag name. Same as {@link tagName}. */
+    nodeName: string;
+    /** Element tag name. Same as {@link nodeName}. */
+    tagName: string;
+    /** List of element attributes. */
+    attrs: Attribute[];
+    /** Element namespace. */
+    namespaceURI: NS;
+    /** Element source code location info, with attributes. Available if location info is enabled. */
+    sourceCodeLocation?: ElementLocation | null;
+    /** Parent node. */
+    parentNode: ParentNode | null;
+    /** The node's children. */
+    childNodes: ChildNode[];
+}
+export interface CommentNode {
+    /** The name of the node. */
+    nodeName: '#comment';
+    /** Parent node. */
+    parentNode: ParentNode | null;
+    /** Comment text. */
+    data: string;
+    /** Comment source code location info. Available if location info is enabled. */
+    sourceCodeLocation?: Location | null;
+}
+export interface TextNode {
+    nodeName: '#text';
+    /** Parent node. */
+    parentNode: ParentNode | null;
+    /** Text content. */
+    value: string;
+    /** Comment source code location info. Available if location info is enabled. */
+    sourceCodeLocation?: Location | null;
+}
+export interface Template extends Element {
+    nodeName: 'template';
+    tagName: 'template';
+    /** The content of a `template` tag. */
+    content: DocumentFragment;
+}
+export interface DocumentType {
+    /** The name of the node. */
+    nodeName: '#documentType';
+    /** Parent node. */
+    parentNode: ParentNode | null;
+    /** Document type name. */
+    name: string;
+    /** Document type public identifier. */
+    publicId: string;
+    /** Document type system identifier. */
+    systemId: string;
+    /** Comment source code location info. Available if location info is enabled. */
+    sourceCodeLocation?: Location | null;
+}
+export type ParentNode = Document | DocumentFragment | Element | Template;
+export type ChildNode = Element | Template | CommentNode | TextNode | DocumentType;
+export type Node = ParentNode | ChildNode;
+export type DefaultTreeAdapterMap = TreeAdapterTypeMap<Node, ParentNode, ChildNode, Document, DocumentFragment, Element, CommentNode, TextNode, Template, DocumentType>;
+export declare const defaultTreeAdapter: TreeAdapter<DefaultTreeAdapterMap>;