feat(behandelportal): WP-65a beoordeling detail (read) + fix unreachable medewerker login

New GET /beoordeling/{id} shows one aanvraag's status, linked documents, and a
canBesluiten decision flag, gated by the same CanBeoordelen capability as the
werkvoorraad list. Reads through IZaakSource.ListCases rather than a new seam
method (WP-66 needs one anyway for the real write); owner BSN is masked.

Fixes a real gap found while wiring this up: the behandelportal's login was still
WP-61's copied citizen/BSN DigiD flow, so nothing ever sent X-Medewerker and the
werkvoorraad screen (WP-64) always denied in a real browser. A dev-only
medewerkerInterceptor (mirrors the existing ?role= stand-in as ?rollen=) fixes that.

WP-65's own Risks note authorized splitting read from write across sessions given
its size; this is the read half. The decision-recording mutation is next (65b).

Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>

apps/behandelportal/src/locale/messages.en.xlf

@@ -2960,6 +2960,66 @@
         <source>Opnieuw proberen</source>
         <target datatype="html">Try again</target>
       </trans-unit>
+      <trans-unit id="beoordeling.status.meerInfoGevraagd" datatype="html">
+        <source>Meer informatie gevraagd</source>
+        <target datatype="html">More information requested</target>
+      </trans-unit>
+      <trans-unit id="beoordeling.status.goedgekeurd" datatype="html">
+        <source>Goedgekeurd</source>
+        <target datatype="html">Approved</target>
+      </trans-unit>
+      <trans-unit id="beoordeling.status.afgewezen" datatype="html">
+        <source>Afgewezen</source>
+        <target datatype="html">Rejected</target>
+      </trans-unit>
+      <trans-unit id="beoordeling.detail.soort" datatype="html">
+        <source>Soort aanvraag</source>
+        <target datatype="html">Application type</target>
+      </trans-unit>
+      <trans-unit id="beoordeling.detail.status" datatype="html">
+        <source>Status</source>
+        <target datatype="html">Status</target>
+      </trans-unit>
+      <trans-unit id="beoordeling.detail.referentie" datatype="html">
+        <source>Referentie</source>
+        <target datatype="html">Reference</target>
+      </trans-unit>
+      <trans-unit id="beoordeling.detail.eigenaar" datatype="html">
+        <source>Eigenaar (BSN)</source>
+        <target datatype="html">Owner (BSN)</target>
+      </trans-unit>
+      <trans-unit id="beoordeling.detail.ingediend" datatype="html">
+        <source>Ingediend op</source>
+        <target datatype="html">Submitted on</target>
+      </trans-unit>
+      <trans-unit id="beoordeling.detail.reden" datatype="html">
+        <source>Reden</source>
+        <target datatype="html">Reason</target>
+      </trans-unit>
+      <trans-unit id="beoordeling.heading" datatype="html">
+        <source>Aanvraag</source>
+        <target datatype="html">Application</target>
+      </trans-unit>
+      <trans-unit id="beoordeling.detail.heading" datatype="html">
+        <source>Aanvraaggegevens</source>
+        <target datatype="html">Application details</target>
+      </trans-unit>
+      <trans-unit id="beoordeling.documenten.heading" datatype="html">
+        <source>Documenten</source>
+        <target datatype="html">Documents</target>
+      </trans-unit>
+      <trans-unit id="beoordeling.documenten.leeg" datatype="html">
+        <source>Geen documenten.</source>
+        <target datatype="html">No documents.</target>
+      </trans-unit>
+      <trans-unit id="beoordeling.failed" datatype="html">
+        <source>De aanvraag kon niet worden geladen.</source>
+        <target datatype="html">The application could not be loaded.</target>
+      </trans-unit>
+      <trans-unit id="beoordeling.retry" datatype="html">
+        <source>Opnieuw proberen</source>
+        <target datatype="html">Try again</target>
+      </trans-unit>
       <trans-unit id="beheer.noTables" datatype="html">
         <source>Er is geen stamdata om te beheren.</source>
         <target datatype="html">There is no stamdata to manage.</target>