feat(api,web): c2 consulta de clientes — list + search + auth flow

prisma: modelo Client + migração 20260527225728_add_client + seed dev (10 clientes)
api: GET /clients (list, busca, filtro atividade/financeiro, paginação) + GET /clients/:id
     rep vê carteira própria; supervisor/admin vê tudo; activityStatus calculado de lastOrderAt
@sar/api-interface: ClientSummarySchema, ClientDetailSchema, ClientListResponseSchema
web: ClientsPage (tabela AntD, busca, filtro), DevLogin (token dev), authStore, Bearer no apiFetch
oq-4 resolvida: creditLimit gerenciado no SAR

Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>

apps/api/src/app/auth/jwt-auth.guard.ts

@@ -48,6 +48,7 @@ export class JwtAuthGuard implements CanActivate {
       const workspaceId = payload.workspace_id;
       this.cls.set('workspaceId', workspaceId);
       this.cls.set('userId', payload.sub);
+      this.cls.set('role', payload.role);
 
       const dbUrl =
         process.env['DATABASE_URL'] ??