feat: extend module platform with UI slots, runtime components, CLI tooling and {{userId}} search support

Completes the generic module platform that enables modules to contribute
UI elements, runtime JS components, and search resources without any
core hardcoding.

New generic UI slot types:
- topbar.right_item: module-contributed topbar buttons
- layout.body_end_template: module-contributed dialog/overlay templates
- layout.head_style: module-contributed global CSS
- runtime.component: declarative JS component registration with phase ordering

New infrastructure:
- ModuleAutoloader: PSR-4 autoloading for module-local PHP classes
- ModuleRuntimePageBuilder: symlinks module pages into runtime directory
- ModuleRuntimeAssetPublisher: publishes module CSS/JS to web/modules/
- ModulePermissionSynchronizer: syncs module permissions to DB
- CLI scripts: module-runtime-sync, module-build, module-migrate,
  module-permissions-sync, module-assets-sync
- {{userId}} placeholder in SearchDataService for user-scoped search queries
- Component runtime with phased initialization (early/default/late)
- AppContainer.protectExistingBindings() to prevent module→core overwrites
- Architecture tests: ModuleStructureContractTest, CoreTemplateIsolationTest,
  FrontendComponentRuntimeContractTest, AppContainerIsolationContractTest

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

tests/App/Module/RouterConfigCollisionTest.php

@@ -0,0 +1,55 @@
+<?php
+
+namespace MintyPHP\Tests\App\Module;
+
+use MintyPHP\App\AppContainer;
+use MintyPHP\App\Module\ModuleRegistry;
+use MintyPHP\Tests\Support\AppContainerIsolationTrait;
+use PHPUnit\Framework\TestCase;
+
+final class RouterConfigCollisionTest extends TestCase
+{
+    use AppContainerIsolationTrait;
+
+    /**
+     * @runInSeparateProcess
+     */
+    public function testModuleRoutePathCollidingWithCoreRouteThrows(): void
+    {
+        $fixturesDir = sys_get_temp_dir() . '/router-config-collision-' . uniqid();
+        mkdir($fixturesDir . '/mod-a', 0777, true);
+        file_put_contents(
+            $fixturesDir . '/mod-a/module.php',
+            '<?php return ' . var_export([
+                'id' => 'mod-a',
+                'routes' => [
+                    ['path' => 'login', 'target' => 'mod-a/login'],
+                ],
+            ], true) . ';'
+        );
+
+        try {
+            $registry = ModuleRegistry::boot($fixturesDir, ['mod-a']);
+
+            $container = new AppContainer();
+            $container->set(ModuleRegistry::class, static fn (): ModuleRegistry => $registry);
+            $this->pushAppContainer($container);
+
+            if (!defined('APP_ROUTE_DEFINITIONS')) {
+                define('APP_ROUTE_DEFINITIONS', [
+                    ['path' => 'login', 'target' => 'auth/login'],
+                ]);
+            }
+
+            $this->expectException(\RuntimeException::class);
+            $this->expectExceptionMessage('Module route path conflict');
+
+            require dirname(__DIR__, 3) . '/config/router.php';
+        } finally {
+            $this->restoreAppContainer();
+            @unlink($fixturesDir . '/mod-a/module.php');
+            @rmdir($fixturesDir . '/mod-a');
+            @rmdir($fixturesDir);
+        }
+    }
+}