feat(WP-67): merge behandelportal into this repo as a monorepo

Restructures into apps/ssp + apps/behandelportal (two Angular projects)
plus libs/shared + libs/beheer (cross-app libraries), replacing WP-61's
separate sibling repo. That split had already produced real drift: a
hand-vendored copy of the backend's OpenAPI doc, a shared/ui+layout tree
forked and silently diverging (7 files), and beheer + the styles.scss
token bridge duplicated byte-for-byte across both repos.

- git mv the SSP's src/app/* into apps/ssp/; fold shared/, beheer/,
  environments/, the Storybook docs/*.mdx, and styles.scss into
  libs/shared + libs/beheer (all confirmed identical between the two
  repos before merging). auth stays deliberately duplicated per
  ADR-0002 (actor-specific, expected to diverge) - amended there.
- One generated API client (libs/shared), no more vendored swagger.json.
- .dependency-cruiser split into a base factory + one config per app,
  and Storybook into .storybook-ssp/.storybook-behandelportal - both
  forced by the @auth/* alias resolving to different directories per app.
- SiteHeaderComponent/ShellComponent gained HEADER_NAV_ITEMS/
  HEADER_ADMIN_LINKS/DEBUG_PANEL injection tokens so each app supplies
  its own nav/admin-links/dev-panel instead of one being hardcoded.
- CLAUDE.md, ARCHITECTURE.md, dependencies.md, and ADR-0002 updated;
  WP-67 backlog entry documents the full decision trail.

npm run ci green (lint, dep:check x2, 360 tests across ssp/
behandelportal/shared/beheer, both localized builds, backend tests,
snippet + api-client drift); both dev servers, both Storybook
instances, and docker compose verified working.

The old sibling repo (/home/eho/repos/behandelportal) is left
untouched, not deleted.

Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>

apps/ssp/src/app/brief/ui/diagnostics-panel/diagnostics-panel.component.ts

@@ -0,0 +1,73 @@
+import { Component, computed, input, output } from '@angular/core';
+import { AlertComponent } from '@shared/ui/alert/alert.component';
+import { Diagnostic } from '@brief/domain/placeholders';
+
+/** Molecule: lists all letter diagnostics grouped by severity. Errors block
+    save/send; warnings (deprecated, unresolved-at-send) are surfaced but allowed.
+    Fed by a `computed()` over the letter content — never stored. */
+@Component({
+  selector: 'app-diagnostics-panel',
+  imports: [AlertComponent],
+  styles: [
+    `
+      :host {
+        display: block;
+      }
+      ul {
+        margin: 0;
+        padding-inline-start: 1.1rem;
+        display: grid;
+        gap: 0.15rem;
+      }
+      button {
+        background: none;
+        border: 0;
+        padding: 0;
+        color: var(--rhc-color-foreground-link);
+        cursor: pointer;
+        text-align: start;
+        text-decoration: underline;
+      }
+    `,
+  ],
+  template: `
+    @if (errors().length) {
+      <app-alert type="error">
+        <strong>{{ errorsTitle() }}</strong>
+        <ul>
+          @for (d of errors(); track $index) {
+            <li>
+              <button type="button" (click)="locate.emit(d)">{{ d.message }}</button>
+            </li>
+          }
+        </ul>
+      </app-alert>
+    }
+    @if (warnings().length) {
+      <app-alert type="warning">
+        <strong>{{ warningsTitle() }}</strong>
+        <ul>
+          @for (d of warnings(); track $index) {
+            <li>
+              <button type="button" (click)="locate.emit(d)">{{ d.message }}</button>
+            </li>
+          }
+        </ul>
+      </app-alert>
+    }
+    @if (!errors().length && !warnings().length) {
+      <app-alert type="ok">{{ cleanText() }}</app-alert>
+    }
+  `,
+})
+export class DiagnosticsPanelComponent {
+  diagnostics = input<readonly Diagnostic[]>([]);
+  locate = output<Diagnostic>();
+
+  errorsTitle = input($localize`:@@brief.diag.errors:Op te lossen voor indienen/versturen:`);
+  warningsTitle = input($localize`:@@brief.diag.warnings:Aandachtspunten:`);
+  cleanText = input($localize`:@@brief.diag.clean:Geen problemen gevonden in de velden.`);
+
+  protected errors = computed(() => this.diagnostics().filter((d) => d.severity === 'error'));
+  protected warnings = computed(() => this.diagnostics().filter((d) => d.severity === 'warning'));
+}