feat(boundaries): WP-03 — contracts purity + ApiClient confinement

Lint-enforce two architecture rules that were only documented (ADR-0001),
landing the rules with the fixes so the build stays green:

- contracts/ imports nothing: dashboard-view.dto.ts is now pure wire shapes
  (inline string-union enums, no domain imports). The DashboardView FE-view
  type moves to the adapter, which maps wire → domain (compiler-enforced seam).
- ApiClient lives only in infrastructure: change-request-form (UI) no longer
  injects ApiClient — a new ChangeRequestAdapter owns the client and the submit
  becomes a createSubmitChangeRequest() command factory (createDraftSync shape).
  draft-sync's wire-DTO import becomes type-only (allowed via allowTypeImports).
- Role type moves to shared/domain/role.ts; the ?role= reader stays in
  shared/infrastructure/role.ts.
- eslint: contracts import-ban + @typescript-eslint/no-restricted-imports on
  api-client (value-only; type imports permitted; infra + shared/upload exempt).

Also fixes a PRE-EXISTING bug found while verifying the flow: change-request-form
never imported FormsModule, so (ngSubmit) didn't bind and the submit button did a
native form submit (page reload) instead of submitting. Verified end-to-end in the
running app: submit → command → adapter → backend → reference, success alert shown.

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

src/app/registratie/infrastructure/dashboard-view.adapter.ts

@@ -1,8 +1,21 @@
 import { Injectable, inject, resource } from '@angular/core';
 import { Result, ok, err } from '@shared/kernel/fp';
-import { DashboardViewDto, DashboardView } from '@registratie/contracts/dashboard-view.dto';
+import { DashboardViewDto, HerregistratieDecisions } from '@registratie/contracts/dashboard-view.dto';
+import { Registration } from '@registratie/domain/registration';
+import { Person } from '@registratie/domain/person';
+import { BigProfile } from '@registratie/domain/big-profile';
 import { ApiClient } from '@shared/infrastructure/api-client';
 
+/**
+ * The parsed, frontend-side view: the wire DTO mapped onto our own domain model.
+ * Lives HERE, not in contracts/, because it references domain types — contracts
+ * stays import-free. This split is the decoupling seam (CLAUDE.md §1, ADR-0001).
+ */
+export interface DashboardView {
+  profile: BigProfile;
+  decisions: HerregistratieDecisions;
+}
+
 /**
  * Infrastructure adapter for the screen-shaped ("BFF-lite") dashboard endpoint.
  * ONE call returns registration + person + server-computed decisions. The data
@@ -48,8 +61,21 @@ export function parseDashboardView(json: unknown): Result<string, DashboardView>
     return err('dashboard-view: missing/invalid decisions');
   }
 
+  // Map wire → domain. The shapes are identical today, so this reads as an
+  // identity copy — but the TYPES differ (wire DTO vs domain), so the moment the
+  // wire diverges the compiler forces a real mapping here. That's the seam.
+  const registration: Registration = {
+    bigNummer: reg.bigNummer,
+    naam: reg.naam,
+    beroep: reg.beroep,
+    registratiedatum: reg.registratiedatum,
+    geboortedatum: reg.geboortedatum,
+    status: reg.status,
+  };
+  const persoon: Person = { naam: person.naam, geboortedatum: person.geboortedatum, adres: person.adres };
+
   return ok({
-    profile: { registration: reg, person },
+    profile: { registration, person: persoon },
     decisions: { eligibleForHerregistratie: d.eligibleForHerregistratie, herregistratieReason: d.herregistratieReason },
   });
 }