feat(platform): residential module + admin UI + reliability fixes

Residential platform
- New schema: residentialClients, residentialInterests (separate from
  marina/yacht clients) with migration 0010
- Service layer with CRUD + audit + sockets + per-port portal toggle
- v1 + public API routes (/api/v1/residential/*, /api/public/residential-inquiries)
- List + detail pages with inline editing for clients and interests
- Per-user residentialAccess toggle on userPortRoles (migration 0011)
- Permission keys: residential_clients, residential_interests
- Sidebar nav + role form integration
- Smoke spec covering page loads, UI create flow, public endpoint

Admin & shared UI
- Admin → Forms (form templates CRUD) with validators + service
- Notification preferences page (in-app + email per type)
- Email composition + accounts list + threads view
- Branded auth shell shared across CRM + portal auth surfaces
- Inline editing extended to yacht/company/interest detail pages
- InlineTagEditor + per-entity tags endpoints (yachts, companies)
- Notes service polymorphic across clients/interests/yachts/companies
- Client list columns: yachtCount + companyCount badges
- Reservation file-download via presigned URL (replaces stale <a href>)

Route handler refactor
- Extracted yachts/companies/berths reservation handlers to sibling
  handlers.ts files (Next.js 15 route.ts only allows specific exports)

Reliability fixes
- apiFetch double-stringify bug fixed across 13 components
  (apiFetch already JSON.stringifies its body; passing a stringified
  body produced double-encoded JSON which failed zod validation)
- SocketProvider gated behind useSyncExternalStore-based mount check
  to avoid useSession() SSR crashes under React 19 + Next 15
- apiFetch falls back to URL-pathname → port-id resolution when the
  Zustand store hasn't hydrated yet (fresh contexts, e2e tests)
- CRM invite flow (schema, service, route, email, dev script)
- Dashboard route → [portSlug]/dashboard/page.tsx + redirect
- Document the dev-server restart-after-migration gotcha in CLAUDE.md

Tests
- 5-case residential smoke spec
- Integration test updates for new service signatures

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>

src/lib/services/companies.service.ts

@@ -106,9 +106,18 @@ export async function createCompany(portId: string, data: CreateCompanyInput, me
 export async function getCompanyById(id: string, portId: string) {
   const company = await db.query.companies.findFirst({
     where: and(eq(companies.id, id), eq(companies.portId, portId)),
+    with: {
+      tags: { with: { tag: true } },
+    },
   });
   if (!company) throw new NotFoundError('Company');
-  return company;
+  const { tags: tagJoins, ...rest } = company as typeof company & {
+    tags: Array<{ tag: { id: string; name: string; color: string } }>;
+  };
+  return {
+    ...rest,
+    tags: tagJoins.map((t) => t.tag),
+  };
 }
 
 // ─── Update ──────────────────────────────────────────────────────────────────
@@ -297,3 +306,32 @@ export async function upsertByName(portId: string, name: string, meta: AuditMeta
     }
   });
 }
+
+export async function setCompanyTags(
+  companyId: string,
+  portId: string,
+  tagIds: string[],
+  meta: AuditMeta,
+) {
+  const company = await db.query.companies.findFirst({ where: eq(companies.id, companyId) });
+  if (!company || company.portId !== portId) throw new NotFoundError('Company');
+
+  await db.delete(companyTags).where(eq(companyTags.companyId, companyId));
+
+  if (tagIds.length > 0) {
+    await db.insert(companyTags).values(tagIds.map((tagId) => ({ companyId, tagId })));
+  }
+
+  void createAuditLog({
+    userId: meta.userId,
+    portId,
+    action: 'update',
+    entityType: 'company',
+    entityId: companyId,
+    newValue: { tagIds },
+    ipAddress: meta.ipAddress,
+    userAgent: meta.userAgent,
+  });
+
+  emitToRoom(`port:${portId}`, 'company:updated', { companyId, changedFields: ['tags'] });
+}