feat(web): setup wizard / integrations hub / release environments UI

Rewire the setup wizard UI to the persistent session endpoints:
resume-aware state service, truthful step status (draft / applying /
applied / failed), and wizard shell that no longer treats
test-connection as completion. Refresh the integrations hub to expose
Secrets / Feed Mirrors / Object Storage categories and align the
onboarding wizard validation with the backend contract for
optional-auth local connectors.

Modernize the release-orchestrator environments pages against the new
environment/target API (models + client), plus adjacent navigation,
route-surface, and test-surface refresh. Add Playwright harnesses for
live setup-wizard bootstrap / integrations bootstrap / state truth
checks, and commit their evidence.

Closes UISETUP-* from SPRINT_20260413_003 and the UI-facing tasks of
SPRINT_20260413_004.

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

src/Web/StellaOps.Web/tsconfig.spec.active-surfaces.json

@@ -8,10 +8,13 @@
   },
   "files": [
     "src/test-setup.ts",
+    "src/app/features/integration-hub/integration.service.spec.ts",
+    "src/app/features/integrations/integration-wizard.component.spec.ts",
     "src/tests/deployments/create-deployment.component.spec.ts",
     "src/tests/evidence/evidence-center-hub.component.spec.ts",
     "src/tests/graph_reachability_overlay/graph-canvas.component.spec.ts",
     "src/tests/graph_reachability_overlay/graph-overlays.component.spec.ts",
+    "src/tests/integration_hub/integration-onboarding-wizard.component.spec.ts",
     "src/tests/release-control/environment-detail-standardization.component.spec.ts",
     "src/tests/sprint309/security-vulnerability-detail-page.component.spec.ts",
     "src/tests/sprint309/signed-score-ribbon.component.spec.ts"