[Admin] Add scoped resource discovery with TDesign tables

[XnLemon]

Summary

Implements Issue #112 as a staged TDesign Admin control-plane experience.

This PR now includes:

• Scoped Tenant, App, Revision, Model, Backend, and Binding discovery with stable ordering, status filters, query support, and cursor pagination.
• In-memory, PostgreSQL, and MySQL list repository implementations with tenant-scope enforcement.
• A server-backed TDesign admin UI with resource tables, empty/error/retry states, pagination, detail navigation, and responsive desktop/mobile layouts.
• Drawer-based creation flows for tenants and resource profiles, replacing the previous large inline creation panels.
• Same-origin administrator login with username/password authentication, signed HttpOnly sessions, credential-version invalidation, CSRF origin checks, logout, and static Bearer-token compatibility.
• Production /admin mounting support, including Vite asset paths, development SPA fallback, and deep-link routing.
• The official tRPC Agent logo shared across the login page and admin shell.
• README documentation and an Admin login preview asset.
• .smoke artifacts removed from Git tracking and ignored for future local smoke-test output.

Issue Ledger

• Tenant and resource collection discovery with scoped filtering and pagination across in-memory, PostgreSQL, and MySQL repositories.
• /me principal context for the Admin shell.
• TDesign list/table interactions for Tenant, App, Revision, Model, Backend, and Binding discovery.
• Responsive admin shell and mobile navigation.
• Drawer-based create flows for admin resources.
• Same-origin browser session boundary with username/password login, session probe, logout, signed HttpOnly cookies, CSRF origin checks, and Bearer compatibility.
• /admin production mount and development deep-link behavior.
• README/Admin UI documentation and local smoke-artifact hygiene.
• Model/Backend catalog query endpoints and server-driven form options.
• Complete snake_case wire migration, including all response DTOs and compatibility tests.
• Audit, usage/cost, health-summary query surfaces and corresponding pages.

The unchecked items are independent follow-up capabilities and remain documented in docs/docs/admin-web-ui.md.

Validation

• go test ./... -count=1
• go test -race ./trpcservice/admin ./trpcservice/gateway ./trpcservice/bootstrap
• npm test from admin-ui
• npm run build from admin-ui
• npx tsc --noEmit from admin-ui
• git diff --check

Review Fixes Included

• MySQL repositories implement all Admin list contracts and map the shared MySQL storage sentinel to the documented 503 storage_unavailable response.
• In-memory revision search matches PostgreSQL behavior, including GlobalInstruction.
• Tenant reset reloads with cleared filters, and tenant list loading remains stable across renders.
• Admin sessions are self-contained HMAC-signed cookies that validate across replicas, reject tampering, and invalidate when credentials change.
• New App drafts initialize an empty TDesign editor before the first create request.
• Same-origin checks and Secure cookies honor the public protocol when TLS terminates at a trusted reverse proxy.
• The Redis runtime provider and tenant-scoped bootstrap/deployment compatibility are preserved.
• Platform wildcard TRPC_ADMIN_TENANTS=* is explicit while empty and explicit scopes remain isolated.

Latest Follow-up

• Added exhaustive SQL-mocked contract coverage for PostgreSQL Agent List, ListRevisions, and scanRevisionNumbers: receiver/storage guards, page bounds, valid and invalid cursors, filters, empty pages, query/scan/iteration/load failures, UTC normalization, and row-close errors.
• List, ListRevisions, and scanRevisionNumbers each reach 100% statement coverage in the PostgreSQL package.
• go test ./trpcservice/agent/... -count=1
• go test -race ./trpcservice/agent/postgres -count=1
• PostgreSQL list calls now propagate context.Canceled before checking storage, matching the repository cancellation contract.
• Refactored the PostgreSQL list readiness guard into checkList, preserving canceled-context precedence while keeping the list handler below the repository gocyclo threshold.
• Added exhaustive SQL-mocked return and route fallback coverage for Admin, Agent, Backend, Channel, Model, and Tenant list/auth paths.
• Added the missing ambient TDesign Drawer declaration and export used by the Admin shell and resource drawers.
• npx tsc --noEmit --pretty false, npm test, and npm run build pass from admin-ui.
• Final head c528eab6e30ff746dd8fb290a94e174d572639f9 has all GitHub checks passing; the review finding for this head is resolved.

[codecov]

Codecov Report

❌ Patch coverage is 89.84000% with 127 lines in your changes missing coverage. Please review.

Files with missing lines	Patch %	Lines
trpcservice/channels/inmemory/inmemory.go	68.42%	6 Missing and 6 partials ⚠️
trpcservice/channels/mysql/repository.go	77.77%	6 Missing and 6 partials ⚠️
trpcservice/model/inmemory/inmemory.go	68.42%	6 Missing and 6 partials ⚠️
trpcservice/tenant/mysql/repository.go	85.33%	6 Missing and 5 partials ⚠️
trpcservice/channels/postgres/repository.go	79.59%	5 Missing and 5 partials ⚠️
trpcservice/model/mysql/repository.go	78.26%	5 Missing and 5 partials ⚠️
trpcservice/agent/mysql/repository.go	92.30%	4 Missing and 4 partials ⚠️
trpcservice/backend/postgres/repository.go	83.67%	4 Missing and 4 partials ⚠️
trpcservice/model/postgres/repository.go	78.37%	4 Missing and 4 partials ⚠️
trpcservice/tenant/inmemory/inmemory.go	84.90%	4 Missing and 4 partials ⚠️
... and 9 more

📢 Thoughts on this report? Let us know!

[XnLemon]

The inline reply documents the scoped tenant-discovery fix and its regression coverage. Submitting this existing draft closes the older review so a fresh clean review can target the latest head.

[XnLemon]

LGTM

[XnLemon]

LGTM

[XnLemon]

LGTM

[XnLemon]

LGTM

[XnLemon]

LGTM

[XnLemon]

LGTM

[XnLemon]

lets go LGTM