Feat v0.7.0 shell contract + surface audit + rebrand

Two-slot shell topbar (home, left, center, bell, user menu) with SDK API
(setLeft/setSlot/setTitle/hide/show). All 4 primary surfaces migrated:
Settings and Team Admin to Pattern B (flat tabs), Admin to Pattern C
(category tabs + sidebar), Docs to Pattern A (default).

Backend WS events: package.changed (broadcast), auth.changed (targeted),
notification.all_read. User menu re-fetches on package/auth changes.
Bell syncs read state across tabs.

Error handling pass with .sw-inline-error CSS primitive. Empty state
guidance for Admin Workflows/Groups. Announcement global dismiss via
localStorage. Rebrand assets deployed (both b/e icon variants, wordmarks,
full icon library). Docs outline scroll-to-heading fix.

Bug fixes: ICD security assertion tightened, workflow-demo error surfacing,
signoff display names, hello-dashboard + team-admin/groups.js deleted.

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

server/pages/templates/base.html

@@ -75,12 +75,16 @@
     {{end}}
 
     {{if .Message.Visible}}
-    <div class="sw-shell__announcement" id="shellMessage">
+    <div class="sw-shell__announcement" id="shellMessage" data-msg-text="{{.Message.Text}}">
         <div class="sw-shell__announcement-inner sw-shell__announcement--{{.Message.Variant}}">
             <span class="sw-shell__announcement-text">{{.Message.Text}}</span>
-            <button class="sw-shell__banner-close" onclick="this.closest('.sw-shell__announcement').remove()" aria-label="Dismiss">&times;</button>
+            <button class="sw-shell__banner-close" aria-label="Dismiss"
+                    onclick="var el=this.closest('.sw-shell__announcement');var t=el.dataset.msgText||'';var k='armature_dismissed_'+Array.from(t).reduce(function(h,c){return((h<<5)-h)+c.charCodeAt(0)|0;},0);localStorage.setItem(k,'1');el.remove();">&times;</button>
         </div>
     </div>
+    <script nonce="{{.CSPNonce}}">
+    (function(){var el=document.getElementById('shellMessage');if(!el)return;var t=el.dataset.msgText||'';var k='armature_dismissed_'+Array.from(t).reduce(function(h,c){return((h<<5)-h)+c.charCodeAt(0)|0;},0);if(localStorage.getItem(k))el.remove();})();
+    </script>
     {{end}}
 
     <div class="surface" id="surface">

server/pages/templates/surfaces/admin.html

@@ -5,6 +5,7 @@
 */}}
 
 {{define "surface-admin"}}
+<div id="shell-topbar"></div>
 <div id="admin-mount" class="surface-admin" style="flex-direction:column;">
     {{/* Preact renders into this div. Show a loading state until it mounts. */}}
     <div class="settings-placeholder" style="padding:40px;text-align:center;">Loading admin&hellip;</div>

server/pages/templates/surfaces/docs.html

@@ -4,6 +4,7 @@
 */}}
 
 {{define "surface-docs"}}
+<div id="shell-topbar"></div>
 <div id="docs-mount" class="surface-docs">
     <div style="padding:40px;text-align:center;color:var(--text-3);">Loading docs&hellip;</div>
 </div>

server/pages/templates/surfaces/extension.html

@@ -13,6 +13,7 @@
 {{define "surface-extension"}}
 <div id="extension-surface" class="extension-surface"
      data-surface-id="{{.Surface}}">
+    <div id="shell-topbar"></div>
     <div id="extension-mount" class="extension-mount" data-ext="{{.Surface}}"></div>
 </div>
 {{end}}

server/pages/templates/surfaces/settings.html

@@ -4,6 +4,7 @@
 */}}
 
 {{define "surface-settings"}}
+<div id="shell-topbar"></div>
 <div id="settings-mount" class="surface-settings" style="flex-direction:column;">
     {{/* Preact renders into this div. Show a loading state until it mounts. */}}
     <div class="settings-placeholder" style="padding:40px;text-align:center;">Loading settings&hellip;</div>

server/pages/templates/surfaces/team-admin.html

@@ -5,6 +5,7 @@
 */}}
 
 {{define "surface-team-admin"}}
+<div id="shell-topbar"></div>
 <div id="team-admin-mount" class="surface-team-admin" style="height:100%;overflow:hidden;">
     <div class="settings-placeholder" style="padding:40px;text-align:center;">Loading team admin&hellip;</div>
 </div>