feat(WP-67): merge behandelportal into this repo as a monorepo

Restructures into apps/ssp + apps/behandelportal (two Angular projects)
plus libs/shared + libs/beheer (cross-app libraries), replacing WP-61's
separate sibling repo. That split had already produced real drift: a
hand-vendored copy of the backend's OpenAPI doc, a shared/ui+layout tree
forked and silently diverging (7 files), and beheer + the styles.scss
token bridge duplicated byte-for-byte across both repos.

- git mv the SSP's src/app/* into apps/ssp/; fold shared/, beheer/,
  environments/, the Storybook docs/*.mdx, and styles.scss into
  libs/shared + libs/beheer (all confirmed identical between the two
  repos before merging). auth stays deliberately duplicated per
  ADR-0002 (actor-specific, expected to diverge) - amended there.
- One generated API client (libs/shared), no more vendored swagger.json.
- .dependency-cruiser split into a base factory + one config per app,
  and Storybook into .storybook-ssp/.storybook-behandelportal - both
  forced by the @auth/* alias resolving to different directories per app.
- SiteHeaderComponent/ShellComponent gained HEADER_NAV_ITEMS/
  HEADER_ADMIN_LINKS/DEBUG_PANEL injection tokens so each app supplies
  its own nav/admin-links/dev-panel instead of one being hardcoded.
- CLAUDE.md, ARCHITECTURE.md, dependencies.md, and ADR-0002 updated;
  WP-67 backlog entry documents the full decision trail.

npm run ci green (lint, dep:check x2, 360 tests across ssp/
behandelportal/shared/beheer, both localized builds, backend tests,
snippet + api-client drift); both dev servers, both Storybook
instances, and docker compose verified working.

The old sibling repo (/home/eho/repos/behandelportal) is left
untouched, not deleted.

Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>

package.json

@@ -6,18 +6,21 @@
     "lint": "eslint .",
     "format:check": "prettier --check .",
     "format": "prettier --write .",
-    "start": "ng serve --proxy-config proxy.conf.json",
+    "start": "ng serve ssp",
+    "start:behandelportal": "ng serve behandelportal",
     "gen:api": "cd backend && dotnet tool restore && dotnet build src/BigRegister.Api -v q && dotnet swagger tofile --output swagger.json src/BigRegister.Api/bin/Debug/net10.0/BigRegister.Api.dll v1 && cd .. && nswag run nswag.json",
-    "build": "ng build",
-    "watch": "ng build --watch --configuration development",
-    "test": "ng test",
-    "test:coverage": "ng test --configuration coverage",
-    "storybook": "ng run atomic-design-poc:storybook",
-    "build-storybook": "ng run atomic-design-poc:build-storybook",
+    "build": "ng build ssp && ng build behandelportal",
+    "watch": "ng build ssp --watch --configuration development",
+    "test": "ng test ssp && ng test behandelportal && ng test shared && ng test beheer",
+    "test:coverage": "ng test ssp --configuration coverage && ng test behandelportal --configuration coverage && ng test shared --configuration coverage && ng test beheer --configuration coverage",
+    "storybook": "ng run ssp:storybook",
+    "storybook:behandelportal": "ng run behandelportal:storybook",
+    "build-storybook": "ng run ssp:build-storybook",
+    "build-storybook:behandelportal": "ng run behandelportal:build-storybook",
     "test-storybook": "test-storybook",
     "test-storybook:ci": "concurrently -k -s first -n sb,axe \"http-server storybook-static -p 6006 --silent\" \"wait-on tcp:127.0.0.1:6006 && test-storybook --url http://127.0.0.1:6006 --maxWorkers=2\"",
     "check:tokens": "bash scripts/check-tokens.sh",
-    "dep:check": "depcruise src/app --config .dependency-cruiser.js",
+    "dep:check": "depcruise apps/ssp/src libs --config .dependency-cruiser.ssp.js && depcruise apps/behandelportal/src libs --config .dependency-cruiser.behandelportal.js",
     "dep:graph": "bash scripts/dep-graph.sh",
     "gen:snippets": "node scripts/gen-snippets.mjs",
     "gen": "plop",
@@ -25,10 +28,11 @@
     "gen:form-machine": "plop form-machine",
     "gen:context": "plop context",
     "create-frontend": "node scripts/create-frontend.mjs",
-    "serve:i18n": "ng build --configuration development --localize && node scripts/serve-i18n.mjs",
+    "serve:i18n": "ng build ssp --configuration development --localize && node scripts/serve-i18n.mjs",
     "ci": "bash scripts/ci-local.sh",
     "e2e": "playwright test",
-    "extract-i18n": "ng extract-i18n --output-path src/locale"
+    "extract-i18n": "ng extract-i18n ssp --output-path apps/ssp/src/locale",
+    "extract-i18n:behandelportal": "ng extract-i18n behandelportal --output-path apps/behandelportal/src/locale"
   },
   "private": true,
   "packageManager": "npm@11.12.1",