feat(launch-readiness-batch): UAT drains, navigation refactor, launch infra, trackers

Bundles the rest of the in-flight work from this UAT round into one
checkpoint. Each sub-area is independent; see the headings below.

UAT polish (drained 11 findings from active-uat.md):
- Dialog primitive default bumped sm:max-w-xl/lg:max-w-3xl →
  sm:max-w-2xl/lg:max-w-4xl so multi-field forms + PDF previews
  aren't cramped at 1440-1920px.
- Notes tab badge aggregation: new countFor{Client,Yacht,Company}
  Aggregated helpers in notes.service mirror the listFor*Aggregated
  symmetric-reach joins. yacht-tabs + company-tabs render the
  badge; client-tabs already had badge support.
- Supplemental-info form polish bundle: BrandedAuthShell gains a
  `width: 'sm' | 'md'` prop (md uses min-h-dvh scroll instead of
  fixed inset-0 pin so long forms scroll naturally). Form picks up
  port branding (logoUrl + backgroundUrl + appName) via
  loadByToken. Address fields completed (street + city + region +
  postal + country). Port name eyebrow + success-state copy added.
- new-document-menu Upload-file landing toast: per-file completion
  emits toast.success with action link to the destination entity
  or folder.
- interest-tabs OverviewTab "from client" pill on Email + Phone
  rows via new EditableRow `inheritedFrom` prop.
- create-document-wizard subject picker → segmented button strip
  (5 types visible at once).

Launch infra:
- UTM column wiring (Init 1b step 4): migration
  0089_website_submissions_utm.sql adds utm_source/medium/campaign/
  term/content + composite index (port_id, utm_source, received_at)
  for per-campaign rollups. website-inquiries intake accepts the
  five fields. Residential intake intentionally untouched per audit
  scope.
- Invoicing module gate (Init 1c spike): new
  invoices-module.service + invoices layout guard + registry entry
  invoices_module_enabled (default false). Audit conclusion in
  launch-readiness.md: payments table is canonical money path;
  /invoices flow is parallel infrastructure now hidden by default.

Smart-back navigation refactor:
- Replaced breadcrumb component with history-aware Back button.
  New route-labels.ts + use-smart-back hook +
  navigation-history-tracker so back falls through to the parent
  route when there's no prior page in history.
- Sidebar / topbar / mobile-topbar adopt the new pattern; old
  breadcrumb-store kept for back-compat consumers but the
  breadcrumbs component is gone.
- 6 detail pages (admin/errors per-id + codes, invoices/
  upload-receipts, reports kind, tenancies detail, analytics
  metric, client detail) migrated.

Trackers + docs:
- docs/launch-readiness.md — master pre-launch tracker. Includes
  the reports gap audit (cross-cutting filter set, Marketing +
  Financial blockers, custom builder remaining entities, scheduled
  CSV/XLSX, template scope picker).
- docs/superpowers/audits/active-uat.md — 15 findings flipped
  OPEN → SHIPPED locally with fix-applied notes; 4 OPEN remaining
  (each blocked on user input or cross-repo).
- CLAUDE.md — minor session notes carried forward.

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>

src/lib/email/shell.ts

@@ -16,6 +16,8 @@
  * function. Templates call `renderShell({ title, body, branding })`.
  */
 
+import type * as React from 'react';
+
 import { absolutizeBrandingUrl } from '@/lib/branding/url';
 
 // Neutral defaults - no tenant-specific imagery leaks across ports.
@@ -96,6 +98,77 @@ export function brandingPrimaryColor(branding?: BrandingShell | null): string {
   return branding?.primaryColor ?? DEFAULT_PRIMARY_COLOR;
 }
 
+/**
+ * Shared style conventions for transactional email bodies.
+ *
+ * Templates compose these instead of inlining one-off `style={{...}}` objects
+ * so the visual rhythm stays consistent across every email - centered title
+ * in the brand accent, body paragraphs left-aligned at 16px / 1.5 line-height,
+ * centered CTA button, fine-print block separated by a soft divider, centered
+ * sign-off in the same accent. Modeled on the hand-rolled templates from the
+ * original portal (signature-notifications.ts) so the look carries forward.
+ *
+ * Functions accept an `accent` color (the resolved port primary) where it's
+ * load-bearing; constants do not.
+ */
+export const emailStyle = {
+  /** Page heading: centered, brand-accent, bold. Used once at the top. */
+  title: (accent: string): React.CSSProperties => ({
+    textAlign: 'center',
+    fontSize: '22px',
+    fontWeight: 'bold',
+    color: accent,
+    margin: '0 0 16px 0',
+  }),
+  /** Body paragraph: 16px / 1.5 line-height, left-aligned for readability. */
+  paragraph: {
+    fontSize: '16px',
+    lineHeight: '1.5',
+    margin: '0 0 16px 0',
+    color: '#333333',
+  } satisfies React.CSSProperties,
+  /** Soft hairline divider above fine-print blocks. */
+  divider: {
+    border: 'none',
+    borderTop: '1px solid #eee',
+    margin: '28px 0 0 0',
+  } satisfies React.CSSProperties,
+  /** Fine print: 14px muted, line-height 1.5. */
+  finePrint: {
+    fontSize: '14px',
+    color: '#666666',
+    lineHeight: '1.5',
+    margin: '12px 0 0 0',
+  } satisfies React.CSSProperties,
+  /** Sign-off block: left-aligned, 16px, sits BETWEEN the last body
+   *  paragraph and the primary CTA so the email reads like a letter
+   *  (greeting -> body -> sign-off -> button -> button-fallback fine
+   *  print). Top margin is intentionally modest because preceding
+   *  paragraphs already carry 16px bottom margin. */
+  signoff: {
+    textAlign: 'left',
+    fontSize: '16px',
+    color: '#333333',
+    margin: '8px 0 0 0',
+  } satisfies React.CSSProperties,
+  /** Outer wrapper that centers the primary CTA button. */
+  buttonRow: {
+    textAlign: 'center',
+    margin: '28px 0',
+  } satisfies React.CSSProperties,
+  /** Primary CTA button style. Compose with `buttonRow` for the surrounding center. */
+  button: (accent: string): React.CSSProperties => ({
+    display: 'inline-block',
+    backgroundColor: accent,
+    color: '#ffffff',
+    textDecoration: 'none',
+    padding: '14px 35px',
+    borderRadius: '5px',
+    fontWeight: 'bold',
+    fontSize: '16px',
+  }),
+} as const;
+
 /**
  * URL-safe escaper for `href="..."` interpolations inside email
  * templates. The email-deliverability audit flagged that every template