feat(a11y): WP-01 — axe-on-every-story CI gate

Turn the interactive Storybook a11y addon into a build gate:
- @storybook/test-runner + axe-playwright over the static build
  (.storybook/test-runner.ts reads the a11y tags from story context)
- test-storybook / test-storybook:ci scripts; storybook-a11y CI job
- triage: escape-hatch a11y.disable on stories whose display:contents
  wrapper splits <ul>/<li> or <dl>/<dt>/<dd> (structural, deferred to
  WP-11/WP-12, each with justification + cross-ref)
- fix trivial violations: footer/wizard-shell contrast, text-input label,
  wizard stories missing provideApiClient

Verified: broken story fails the gate; 133 stories pass.

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

src/app/shared/ui/application-link/application-link.stories.ts

@@ -12,6 +12,12 @@ const meta: Meta<ApplicationLinkComponent> = {
     // Rows are <li>s — a real list gives them their normal layout in the story.
     template: `<ul class="list-unstyled"><app-application-link [heading]="heading" [subtitle]="subtitle" [status]="status" [cta]="cta" [to]="to" [clickable]="clickable" /></ul>`,
   }),
+  parameters: {
+    // Structural: app-application-link's host sits between the <ul> and its <li> —
+    // axe's list/listitem rule requires them adjacent regardless of `display:contents`.
+    // WP-11 (CIBG markup fidelity) reworks this markup; see docs/backlog/WP-11-markup-fidelity.md.
+    a11y: { disable: true },
+  },
 };
 export default meta;
 type Story = StoryObj<ApplicationLinkComponent>;