feat: extend module platform with UI slots, runtime components, CLI tooling and {{userId}} search support

Completes the generic module platform that enables modules to contribute
UI elements, runtime JS components, and search resources without any
core hardcoding.

New generic UI slot types:
- topbar.right_item: module-contributed topbar buttons
- layout.body_end_template: module-contributed dialog/overlay templates
- layout.head_style: module-contributed global CSS
- runtime.component: declarative JS component registration with phase ordering

New infrastructure:
- ModuleAutoloader: PSR-4 autoloading for module-local PHP classes
- ModuleRuntimePageBuilder: symlinks module pages into runtime directory
- ModuleRuntimeAssetPublisher: publishes module CSS/JS to web/modules/
- ModulePermissionSynchronizer: syncs module permissions to DB
- CLI scripts: module-runtime-sync, module-build, module-migrate,
  module-permissions-sync, module-assets-sync
- {{userId}} placeholder in SearchDataService for user-scoped search queries
- Component runtime with phased initialization (early/default/late)
- AppContainer.protectExistingBindings() to prevent module→core overwrites
- Architecture tests: ModuleStructureContractTest, CoreTemplateIsolationTest,
  FrontendComponentRuntimeContractTest, AppContainerIsolationContractTest

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

lib/App/Module/Contracts/LayoutContextProvider.php

@@ -9,6 +9,11 @@ use MintyPHP\App\AppContainer;
  *
  * Called from appBuildLayoutNavContext() after Core data assembly.
  * Return value is merged into the $layoutNav array passed to templates.
+ *
+ * IMPORTANT: Only called in web request context. CLI/scheduler callers
+ * must not invoke layout context providers. Implementations should use
+ * try/catch around request-dependent calls (e.g. requestInput()) as a
+ * defensive measure.
  */
 interface LayoutContextProvider
 {

lib/App/Module/Contracts/SearchResourceProvider.php

@@ -13,6 +13,13 @@ interface SearchResourceProvider
     /**
      * Return search resource definitions.
      *
+     * Supported SQL placeholders (replaced before parameter binding):
+     * - `{{tenantFilter}}` — replaced with a tenant-scope WHERE clause (or empty string)
+     * - `{{userId}}`       — replaced with the current user's ID (integer, safe for inline SQL)
+     *
+     * All remaining `?` placeholders are bound to the LIKE search term.
+     * The last `?` in preview_sql is reserved for the preview limit.
+     *
      * @return array<string, array{
      *     label: string,
      *     permission: string,