feat: extend module platform with UI slots, runtime components, CLI tooling and {{userId}} search support

Completes the generic module platform that enables modules to contribute
UI elements, runtime JS components, and search resources without any
core hardcoding.

New generic UI slot types:
- topbar.right_item: module-contributed topbar buttons
- layout.body_end_template: module-contributed dialog/overlay templates
- layout.head_style: module-contributed global CSS
- runtime.component: declarative JS component registration with phase ordering

New infrastructure:
- ModuleAutoloader: PSR-4 autoloading for module-local PHP classes
- ModuleRuntimePageBuilder: symlinks module pages into runtime directory
- ModuleRuntimeAssetPublisher: publishes module CSS/JS to web/modules/
- ModulePermissionSynchronizer: syncs module permissions to DB
- CLI scripts: module-runtime-sync, module-build, module-migrate,
  module-permissions-sync, module-assets-sync
- {{userId}} placeholder in SearchDataService for user-scoped search queries
- Component runtime with phased initialization (early/default/late)
- AppContainer.protectExistingBindings() to prevent module→core overwrites
- Architecture tests: ModuleStructureContractTest, CoreTemplateIsolationTest,
  FrontendComponentRuntimeContractTest, AppContainerIsolationContractTest

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

web/js/components/app-fslightbox-refresh.js

@@ -1,60 +1,60 @@
 /**
  * Triggers FSLightbox refresh after dynamic content changes.
  */
-const refreshFsLightbox = () => {
-  if (typeof window.requestFsLightboxRefresh === 'function') {
-    return window.requestFsLightboxRefresh();
-  }
-  if (typeof window.refreshFsLightbox === 'function') {
-    window.refreshFsLightbox();
-    window.__fsLightboxRefreshPending = false;
-    return true;
-  }
-  window.__fsLightboxRefreshPending = true;
-  return false;
-};
+import { flushPendingFsLightboxRefresh, requestFsLightboxRefresh } from '../core/app-fslightbox-bridge.js';
+import { resolveHost } from '../core/app-dom.js';
 
-let refreshTimer = null;
-const scheduleRefresh = () => {
-  if (refreshTimer) {return;}
-  refreshTimer = window.setTimeout(() => {
-    refreshTimer = null;
-    refreshFsLightbox();
-  }, 30);
-};
+export function initFsLightboxRefresh(root = document) {
+  const host = resolveHost(root);
+  const observerRoot = host === document ? document.body : host;
 
-const initObserver = () => {
-  if (!document.body || typeof MutationObserver === 'undefined') {
-    return;
+  let refreshTimer = 0;
+  let observer = null;
+
+  const scheduleRefresh = () => {
+    if (refreshTimer) {
+      return;
+    }
+    refreshTimer = window.setTimeout(() => {
+      refreshTimer = 0;
+      requestFsLightboxRefresh();
+    }, 30);
+  };
+
+  if (!requestFsLightboxRefresh()) {
+    scheduleRefresh();
   }
-  const observer = new MutationObserver((mutations) => {
-    for (const mutation of mutations) {
-      for (const node of mutation.addedNodes) {
-        if (!(node instanceof HTMLElement)) {continue;}
-        if (node.matches?.('[data-fslightbox]') || node.querySelector?.('[data-fslightbox]')) {
-          scheduleRefresh();
-          return;
+  requestFsLightboxRefresh();
+
+  if (observerRoot && typeof MutationObserver !== 'undefined') {
+    observer = new MutationObserver((mutations) => {
+      for (const mutation of mutations) {
+        for (const node of mutation.addedNodes) {
+          if (!(node instanceof HTMLElement)) {
+            continue;
+          }
+          if (node.matches?.('[data-fslightbox]') || node.querySelector?.('[data-fslightbox]')) {
+            scheduleRefresh();
+            return;
+          }
         }
       }
+    });
+    observer.observe(observerRoot, { childList: true, subtree: true });
+  }
+
+  flushPendingFsLightboxRefresh();
+
+  const destroy = () => {
+    if (refreshTimer) {
+      window.clearTimeout(refreshTimer);
+      refreshTimer = 0;
     }
-  });
-  observer.observe(document.body, { childList: true, subtree: true });
-};
+    if (observer) {
+      observer.disconnect();
+      observer = null;
+    }
+  };
 
-if (!refreshFsLightbox()) {
-  scheduleRefresh();
-}
-
-if (document.readyState === 'loading') {
-  document.addEventListener('DOMContentLoaded', () => {
-    refreshFsLightbox();
-    initObserver();
-  });
-} else {
-  refreshFsLightbox();
-  initObserver();
-}
-
-if (window.__fsLightboxRefreshPending && typeof window.refreshFsLightbox === 'function') {
-  refreshFsLightbox();
+  return { destroy };
 }