feat(registratie): WP-36 — admin cases page + admin delete

Admin-only overview of all cases across owners + an admin delete, gated by a new
`cases:manage` capability (Authz role→cap + CanManageCases + CasesAdmin gate;
FE capability + guard + nav + role.interceptor prefix — the org-template/stamdata
recipe). Backend adds ApplicationStore.ListAll()/DeleteAny() and GET /admin/cases +
DELETE /admin/cases/{id}; admin delete removes ANY case incl. submitted. Page lives
in registratie/ui (owns the Aanvraag aggregate; reuses aanvraag-view + parse),
routed /beheer/zaken; delete guarded by a native confirm, optimistic with rollback.
Typed client regenerated (documents the new endpoints + owner field).

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>

src/app/app.routes.ts

@@ -74,6 +74,16 @@ export const routes: Routes = [
         canActivate: [capabilityGuard('stamdata:edit')],
         loadComponent: () => import('@beheer/ui/stamdata.page').then((m) => m.StamdataPage),
       },
+      {
+        path: 'beheer/zaken',
+        // Admin-only cases overview + delete (WP-36): capabilityGuard denies-by-default
+        // unless GET /me resolved `cases:manage` (Admin role). Backend re-enforces via the
+        // CasesAdmin gate — the guard just avoids loading a page that would 403. The page
+        // lives in registratie/ui (which owns the Aanvraag aggregate); routed under /beheer.
+        canActivate: [capabilityGuard('cases:manage')],
+        loadComponent: () =>
+          import('@registratie/ui/admin-cases.page').then((m) => m.AdminCasesPage),
+      },
       {
         path: 'concepts',
         loadComponent: () => import('./showcase/concepts.page').then((m) => m.ConceptsPage),