refactor(settings): order hub tiles along an onboarding flow

Reorders the nine settings tiles so a fresh admin walks them top-down:
app basics → look & feel → outbound mail → user policies → integrations
→ observability. Drops the previous order which mixed user policies with
audit/telemetry before integrations and put branding last. Alphabetical
sorting was considered and rejected because it would render different
first tiles per locale (DE vs EN sort to different positions).

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>

pages/admin/settings/index(default).phtml

@@ -15,6 +15,8 @@
 <div class="app-dashboard">
   <div class="app-tiles">
     <?php
+    // Tile order follows an onboarding flow: app basics → look & feel →
+    // outbound mail → user policies → integrations → observability.
     appTile([
       'href' => 'admin/settings/general',
       'label' => t('General'),
@@ -22,6 +24,20 @@
       'iconTone' => 'blue',
       'tooltip' => t('App title, language, registration and new-user defaults'),
     ]);
+    appTile([
+      'href' => 'admin/settings/branding',
+      'label' => t('Branding'),
+      'icon' => 'bi bi-palette',
+      'iconTone' => 'pink',
+      'tooltip' => t('App logo and favicon'),
+    ]);
+    appTile([
+      'href' => 'admin/settings/email',
+      'label' => t('Email'),
+      'icon' => 'bi bi-envelope',
+      'iconTone' => 'amber',
+      'tooltip' => t('SMTP connection and sender details'),
+    ]);
     appTile([
       'href' => 'admin/settings/account-access',
       'label' => t('Account access'),
@@ -36,6 +52,20 @@
       'iconTone' => 'red',
       'tooltip' => t('Inactivity deactivation and deletion policy'),
     ]);
+    appTile([
+      'href' => 'admin/settings/sso',
+      'label' => t('Microsoft SSO'),
+      'icon' => 'bi bi-microsoft',
+      'iconTone' => 'cyan',
+      'tooltip' => t('Shared Microsoft Entra ID credentials'),
+    ]);
+    appTile([
+      'href' => 'admin/settings/api',
+      'label' => t('API'),
+      'icon' => 'bi bi-key',
+      'iconTone' => 'emerald',
+      'tooltip' => t('API token policy and CORS allowlist'),
+    ]);
     appTile([
       'href' => 'admin/settings/audit',
       'label' => t('Audit log'),
@@ -50,34 +80,6 @@
       'iconTone' => 'green',
       'tooltip' => t('Frontend telemetry collection and event allowlist'),
     ]);
-    appTile([
-      'href' => 'admin/settings/email',
-      'label' => t('Email'),
-      'icon' => 'bi bi-envelope',
-      'iconTone' => 'amber',
-      'tooltip' => t('SMTP connection and sender details'),
-    ]);
-    appTile([
-      'href' => 'admin/settings/api',
-      'label' => t('API'),
-      'icon' => 'bi bi-key',
-      'iconTone' => 'emerald',
-      'tooltip' => t('API token policy and CORS allowlist'),
-    ]);
-    appTile([
-      'href' => 'admin/settings/sso',
-      'label' => t('Microsoft SSO'),
-      'icon' => 'bi bi-microsoft',
-      'iconTone' => 'cyan',
-      'tooltip' => t('Shared Microsoft Entra ID credentials'),
-    ]);
-    appTile([
-      'href' => 'admin/settings/branding',
-      'label' => t('Branding'),
-      'icon' => 'bi bi-palette',
-      'iconTone' => 'pink',
-      'tooltip' => t('App logo and favicon'),
-    ]);
     ?>
   </div>
 </div>