feat(shell): make module pages first-class top-level routes

Module pages move from `/modules/<id>` to `/<module-id>` (`/signage`),
beside `/settings` and `/account`, so the implementation concept
"module" never appears in a user-facing address. ADR 0057 is rewritten
to match.

- Core reserves the top-level names the platform actually serves today
  (`account`, `api`, `assets`, `display`, `settings`), and discovery
  refuses a module that declares one with `MODULE_ID_RESERVED`. That
  covers startup, `modules:validate`, and package verification. Tests in
  `apps/api` hold the set to every top-level route the API registers and
  every page the shell interprets.
- The API serves the Dashboard page at `/<module-id>` and below only for
  modules discovered with a Dashboard UI, enabled or not: a disabled
  module's bookmark still opens the Dashboard, which says it is
  unavailable. An arbitrary root path such as
  `/definitely-not-a-real-module` stays the sanitized 404.
- Both reference proxies forward every top-level path shaped like a
  module id and let the API decide; the split Dashboard hostname still
  refuses `/api`, `/display`, and `/assets`. Installing a module needs no
  proxy change.
- `/<module-id>/<page>` is already served and forwarded, so a later
  module sub-page contract needs no routing or deployment change; the
  shell shows "Page not found" there until it exists.
- The deploy smoke checks a module's address before install, while
  installed, while disabled, after removal, and after reinstall, plus
  unknown names and the old `/modules/…` form through the real proxy.

Co-Authored-By: Claude Opus 5.5 <[email protected]>

surfaces/shell/tests/host-history.test.ts

@@ -14,21 +14,21 @@ describe("the browser host history", () => {
     const history = createBrowserHostHistory(window);
     const lengthBefore = window.history.length;
 
-    history.push("/modules/example");
+    history.push("/example");
 
-    expect(history.pathname()).toBe("/modules/example");
-    expect(window.location.pathname).toBe("/modules/example");
+    expect(history.pathname()).toBe("/example");
+    expect(window.location.pathname).toBe("/example");
     expect(window.history.length).toBe(lengthBefore + 1);
   });
 
   it("adds no entry when the page asked for is already open", () => {
     const history = createBrowserHostHistory(window);
-    history.push("/modules/example");
+    history.push("/example");
     const length = window.history.length;
     const listener = vi.fn();
     history.subscribe(listener);
 
-    history.push("/modules/example");
+    history.push("/example");
 
     expect(window.history.length).toBe(length);
     expect(listener).not.toHaveBeenCalled();
@@ -36,12 +36,12 @@ describe("the browser host history", () => {
 
   it("corrects the current entry in place with replace", () => {
     const history = createBrowserHostHistory(window);
-    history.push("/modules/example/");
+    history.push("/example/");
     const length = window.history.length;
 
-    history.replace("/modules/example");
+    history.replace("/example");
 
-    expect(window.location.pathname).toBe("/modules/example");
+    expect(window.location.pathname).toBe("/example");
     expect(window.history.length).toBe(length);
   });
 
@@ -50,14 +50,14 @@ describe("the browser host history", () => {
     const listener = vi.fn();
     const unsubscribe = history.subscribe(listener);
 
-    history.push("/modules/a");
-    history.replace("/modules/b");
+    history.push("/a");
+    history.replace("/b");
     window.dispatchEvent(new PopStateEvent("popstate"));
     expect(listener).toHaveBeenCalledTimes(3);
 
     unsubscribe();
     window.dispatchEvent(new PopStateEvent("popstate"));
-    history.push("/modules/c");
+    history.push("/c");
     expect(listener).toHaveBeenCalledTimes(3);
   });
 
@@ -92,28 +92,28 @@ describe("the browser host history", () => {
     };
     const history = createBrowserHostHistory(view);
 
-    history.push("/modules/a");
-    history.replace("/modules/b");
+    history.push("/a");
+    history.replace("/b");
 
-    expect(view.history.pushState).toHaveBeenCalledWith(null, "", "/modules/a");
-    expect(view.history.replaceState).toHaveBeenCalledWith(null, "", "/modules/b");
+    expect(view.history.pushState).toHaveBeenCalledWith(null, "", "/a");
+    expect(view.history.replaceState).toHaveBeenCalledWith(null, "", "/b");
   });
 });
 
 describe("the in-memory host history", () => {
   it("behaves like the browser's: push truncates forward entries, go steps within bounds", () => {
     const history = createMemoryHostHistory("/");
-    history.push("/modules/a");
-    history.push("/modules/b");
+    history.push("/a");
+    history.push("/b");
     history.go(-1);
-    expect(history.pathname()).toBe("/modules/a");
+    expect(history.pathname()).toBe("/a");
 
-    history.push("/modules/c");
-    expect(history.entries).toEqual(["/", "/modules/a", "/modules/c"]);
+    history.push("/c");
+    expect(history.entries).toEqual(["/", "/a", "/c"]);
 
     history.go(-10);
     expect(history.pathname()).toBe("/");
     history.go(10);
-    expect(history.pathname()).toBe("/modules/c");
+    expect(history.pathname()).toBe("/c");
   });
 });