feat(web): management console — TanStack Start + orval + shadcn + Paraglide

Browser UI for the host's management REST API (mgmt.rs / docs/api/openapi.json).

Stack, exactly as specified:
- TanStack Start (Vite, SPA mode) — file-based routes, SSR shell + client hydration.
- React Query via orval codegen from the checked-in OpenAPI spec: a custom fetch mutator
  (src/api/fetcher.ts) centralizes the base URL, the bearer token (Settings → localStorage),
  JSON, and a throwing ApiError; the query client skips retries on 4xx. orval returns the
  response body directly (includeHttpResponseReturnType:false) so a query's `.data` is the
  typed payload; GET→useQuery, POST/DELETE→useMutation by method.
- shadcn/ui on Tailwind v4 (CSS-first tokens, dark-first) — button/card/badge/input/label/
  table/skeleton primitives hand-authored from the canonical source.
- Paraglide i18n (en + de) with a reactive useLocale() hook and a language switcher.

Pages: dashboard (live status — video/audio/session/stream, stop-session + request-IDR,
2s polling), host (identity/codecs/ports), clients (paired list + unpair), pairing (PIN
submit, polls pin_pending), settings (API token + language).

Dev server proxies /api → 127.0.0.1:47990 (same-origin, no CORS; PUNKTFUNK_MGMT_URL to
override). Generated code (orval client, paraglide runtime, routeTree) is gitignored and
reproduced by `pnpm codegen` (prepare/pre* scripts). Validated live against `serve`: API
shapes match, dev proxy works, SSR shell renders the localized nav, build + tsc green.

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

web/orval.config.ts

@@ -0,0 +1,32 @@
+import { defineConfig } from 'orval'
+
+// Generates a typed React Query client from the host's checked-in OpenAPI document.
+// Regenerate after any management-API change: `pnpm api:gen` (the Rust side regenerates
+// docs/api/openapi.json via `cargo run -p punktfunk-host -- openapi`).
+export default defineConfig({
+  punktfunk: {
+    input: {
+      target: '../docs/api/openapi.json',
+    },
+    output: {
+      mode: 'tags-split',
+      target: './src/api/gen',
+      schemas: './src/api/gen/model',
+      client: 'react-query',
+      clean: true,
+      override: {
+        mutator: {
+          path: './src/api/fetcher.ts',
+          name: 'apiFetch',
+        },
+        // The mutator returns the response BODY (it throws on HTTP errors), not a
+        // `{status,data,headers}` envelope — so a query's `.data` is the typed payload.
+        fetch: {
+          includeHttpResponseReturnType: false,
+        },
+        // No global query/mutation override: orval picks `useQuery` for GET and
+        // `useMutation` for POST/DELETE by HTTP method, which is what the pages expect.
+      },
+    },
+  },
+})