feat(tg): Mini App V6 — premium overhaul (#609)

* feat(tg): Mini App V6 — premium overhaul (design system, Chat parity, Metrics drilldown, CEO verbs)

Design system: native type with tabular-numeral heroes (mono demoted to
the wordmark), borderless elevated cards, floating dock, Telegram
window-chrome painting via the theme bridge; Inbox moves behind a header
bell with humanized notifications (UUIDs resolve to task names).

Chat: honest Mine/Fleet split — participant-scoped CEO threads with real
unread counts and mark-read, watched fleet threads with reply-as-CEO on
task-linked conversations (watch-only otherwise), markdown transcripts,
live pulse flashes, and a pinned Secretary live chat on the panel's SSE
session runtime.

Metrics: new tab with period-segmented spend hero, by-agent/team/model
breakdowns, delivery + efficiency health, and a per-agent drilldown over
usage time-series (agent_slug) + member scorecard.

Board: tg-native grouped pipeline replacing the MobileTaskBoard wrapper;
task sheet gains the CEO decide verbs (approve / request changes /
unblock).

Security: /api/dashboard router now require_panel_token-gated at router
level (mirrors /api/usage), closing unauthenticated metrics exposure.

* fix(tg): restore Share Tech Mono brand voice, Phosphor icon set, borderless avatars

The mono returns as the numeral/brand voice (.tg-display — heroes, stat
values, wordmark) while labels stay native sentence case. The hand-drawn
duotone glyphs and lucide feature icons are replaced by Phosphor (MIT):
duotone at rest via an IconContext at the shell, filled weight on the
dock's active tab; row glyph maps (board statuses, inbox kinds, approval
kinds, quick actions) all move over. Team avatar tiles drop their borders
— tint-only squircles.

* fix(tg): fleet avatar strip breathes — spaced tiles instead of overlap

* polish(tg): taste-skill audit pass — em-dash purge, one icon family, separator rationing

Applied the design-taste audit against the cockpit: every em-dash in
visible UI copy rewritten (periods/commas/colons), the remaining lucide
chrome (carets, arrows, send, close, spinners) moved to Phosphor so the
tg tree ships one icon family (send is the native paper-plane, carets
bold), the hand-rolled chevron SVG deleted, and metadata lines rationed
to a single middle-dot separator.

* polish(tg): pipeline chip strip scrolls without a visible scrollbar

* fix(tests): metrics observability fixture uses a relative timestamp

The hardcoded _T0 (2026-06-20) aged out of the service's 30-day window
exactly 30 days later, detonating the suite on every branch. Two days
back from now() stays inside every window (30d metrics, 7d scorecards)
permanently.

---------

Co-authored-by: Renn F <rennf93@users.noreply.github.com>

panel/src/app/(tg)/tg/__tests__/page.test.tsx

@@ -44,6 +44,14 @@ vi.mock("@/components/tg/tg-board-tab", () => ({
 vi.mock("@/components/tg/tg-chat-tab", () => ({
   TgChatTab: () => <div data-testid="tg-chat-tab" />,
 }));
+vi.mock("@/components/tg/tg-metrics-tab", () => ({
+  TgMetricsTab: () => <div data-testid="tg-metrics-tab" />,
+}));
+// The shell's bell badge count — stubbed so the bootstrap test needs no
+// QueryClientProvider.
+vi.mock("@/hooks/use-notifications", () => ({
+  useNotifications: () => ({ data: undefined }),
+}));
 
 import TelegramMiniAppPage from "../page";
 
@@ -140,9 +148,7 @@ describe("TelegramMiniAppPage — auth bootstrap", () => {
       expect(screen.getByTestId("tg-tab-bar")).toBeInTheDocument(),
     );
     expect(post).not.toHaveBeenCalled();
-    expect(
-      screen.queryByText(/open from telegram/i),
-    ).not.toBeInTheDocument();
+    expect(screen.queryByText(/open from telegram/i)).not.toBeInTheDocument();
   });
 
   it("dev mock also engages when the CDN bridge loaded with empty initData", async () => {