feat(analytics): Umami integration with per-port admin settings

Adds /[portSlug]/website-analytics dashboard page (pageviews, top
pages, top referrers) and a per-port admin config UI for the
Umami URL / website-ID / API token. Settings live in system_settings
keyed per-port so a future second port has its own Umami account.
Adds a website glance tile to the main dashboard, a server-side
test-credentials endpoint, and a stable cache key for the active-
visitor poll so React Query doesn't fragment the cache per range.

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>

src/components/dashboard/website-glance-tile.tsx

@@ -0,0 +1,79 @@
+'use client';
+
+/**
+ * Compact "Website at a glance" tile for the main sales dashboard. Shows
+ * pageviews today + active visitors right now + a deep-link to the full
+ * /website-analytics page. Soft-fails (renders nothing) when Umami isn't
+ * configured for this port - so the dashboard doesn't get cluttered with
+ * a "configure Umami" prompt that the user already saw on the dedicated
+ * page.
+ */
+
+import Link from 'next/link';
+import { Globe, ArrowRight } from 'lucide-react';
+
+import { useUIStore } from '@/stores/ui-store';
+import { Card } from '@/components/ui/card';
+import { Skeleton } from '@/components/ui/skeleton';
+import {
+  useUmamiActive,
+  useUmamiStats,
+} from '@/components/website-analytics/use-website-analytics';
+
+export function WebsiteGlanceTile() {
+  const portSlug = useUIStore((s) => s.currentPortSlug);
+  const stats = useUmamiStats('today');
+  const active = useUmamiActive('today');
+
+  // Hide the tile entirely if Umami isn't configured - this dashboard is
+  // for sales, not for prompting the operator into integration setup.
+  if (
+    stats.data?.error === 'umami_not_configured' ||
+    active.data?.error === 'umami_not_configured'
+  ) {
+    return null;
+  }
+
+  const today = stats.data?.data?.pageviews?.value ?? 0;
+  const activeNow = active.data?.data?.visitors ?? 0;
+  const loading = stats.isLoading || active.isLoading;
+
+  return (
+    <Link
+      /* eslint-disable-next-line @typescript-eslint/no-explicit-any */
+      href={portSlug ? (`/${portSlug}/website-analytics` as any) : ('/' as any)}
+      className="block group"
+    >
+      <Card className="relative overflow-hidden p-3 sm:p-5 transition-shadow hover:shadow-md">
+        <div className="absolute inset-x-0 top-0 h-1 bg-mint" aria-hidden />
+        <div className="flex items-start justify-between gap-3">
+          <div className="min-w-0 flex-1">
+            <div className="flex items-center gap-1.5 text-[10px] font-medium uppercase tracking-wide text-muted-foreground sm:text-xs">
+              <Globe className="h-3 w-3" aria-hidden />
+              Website today
+            </div>
+            {loading ? (
+              <Skeleton className="mt-2 h-7 w-20" />
+            ) : (
+              <div className="mt-1 flex items-baseline gap-2 text-lg font-semibold tabular-nums sm:mt-2 sm:text-2xl">
+                {today.toLocaleString()}
+                <span className="text-xs font-normal text-muted-foreground">pageviews</span>
+              </div>
+            )}
+            <div className="mt-1 flex items-center gap-1.5 text-xs text-muted-foreground">
+              <span className="relative flex h-1.5 w-1.5">
+                <span className="absolute inline-flex h-full w-full animate-ping rounded-full bg-emerald-400 opacity-75" />
+                <span className="relative inline-flex h-1.5 w-1.5 rounded-full bg-emerald-500" />
+              </span>
+              {activeNow} active right now
+            </div>
+          </div>
+          <ArrowRight
+            className="h-4 w-4 shrink-0 text-muted-foreground transition-transform group-hover:translate-x-0.5"
+            aria-hidden
+          />
+        </div>
+      </Card>
+    </Link>
+  );
+}