feat(phase-b): ship analytics dashboard, alerts, scanner PWA, dedup, audit view

Phase B (Insights & Alerts) PR4-11 in one drop. Builds on the schema +
service skeletons committed in PRs 1-3.

PR4  Analytics dashboard — 4 chart types (funnel/timeline/breakdown/source),
     date-range picker (today/7d/30d/90d), CSV+PNG export per card.
PR5  Alert rail UI + /alerts page — topbar bell w/ live count, dashboard
     right-rail, three-tab page (active/dismissed/resolved), socket-driven
     invalidation. Bell lazy-loads list on popover open to keep cold pages
     fast in non-dashboard routes.
PR6  EOI queue tab on documents hub — filters to in-flight EOIs, count
     surfaces in tab label.
PR7  Interests-by-berth tab on berth detail — replaces the stub.
PR8  Expense duplicate detection — BullMQ job runs scan on create, yellow
     banner on detail w/ Merge / Not-a-duplicate, transactional merge
     consolidates receipts and archives the source.
PR9  Receipt scanner PWA + multi-provider AI — port-scoped /scan route in
     its own (scanner) group with no dashboard chrome, dynamic per-port
     manifest, OpenAI + Claude provider abstraction, admin OCR settings
     page (port-level + super-admin global default w/ opt-in fallback),
     test-connection endpoint, manual-entry fallback when no key is
     configured. Verify form always shown before save — no ghost rows.
PR10 Audit log read view — swap to tsvector full-text search on the
     existing GIN index, cursor pagination, filters for entity/action/user
     /date range, batched actor-email resolution.
PR11 Real-API tests — opt-in receipt-ocr.spec (admin save+test, optional
     real-receipt parse via REALAPI_RECEIPT_FIXTURE) and alert-engine
     socket-fanout spec gated behind RUN_ALERT_ENGINE_REALAPI. Both skip
     cleanly without their gate envs so CI stays green.

Test totals: vitest 690 -> 713, smoke 130 -> 138, realapi +2 opt-in.

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>

src/components/alerts/use-alerts.ts

@@ -0,0 +1,50 @@
+'use client';
+
+import { useMutation, useQuery, useQueryClient } from '@tanstack/react-query';
+
+import { apiFetch } from '@/lib/api/client';
+import { useRealtimeInvalidation } from '@/hooks/use-realtime-invalidation';
+import type { AlertCountResponse, AlertListResponse, AlertStatus } from './types';
+
+export function useAlertList(status: AlertStatus = 'open', enabled = true) {
+  return useQuery<AlertListResponse>({
+    queryKey: ['alerts', status],
+    queryFn: () => apiFetch<AlertListResponse>(`/api/v1/alerts?status=${status}`),
+    staleTime: 30_000,
+    enabled,
+  });
+}
+
+export function useAlertCount() {
+  return useQuery<AlertCountResponse>({
+    queryKey: ['alerts', 'count'],
+    queryFn: () => apiFetch<AlertCountResponse>('/api/v1/alerts/count'),
+    staleTime: 30_000,
+  });
+}
+
+export function useAlertActions() {
+  const queryClient = useQueryClient();
+  const invalidate = () => {
+    queryClient.invalidateQueries({ queryKey: ['alerts'] });
+  };
+
+  const acknowledge = useMutation({
+    mutationFn: (id: string) => apiFetch(`/api/v1/alerts/${id}/acknowledge`, { method: 'POST' }),
+    onSuccess: invalidate,
+  });
+  const dismiss = useMutation({
+    mutationFn: (id: string) => apiFetch(`/api/v1/alerts/${id}/dismiss`, { method: 'POST' }),
+    onSuccess: invalidate,
+  });
+
+  return { acknowledge, dismiss };
+}
+
+export function useAlertRealtime() {
+  useRealtimeInvalidation({
+    'alert:created': [['alerts']],
+    'alert:resolved': [['alerts']],
+    'alert:dismissed': [['alerts']],
+  });
+}