feat(ui): ship topology and trust admin cutover

docs/features/checked/web/topology-trust-administration-ui.md

@@ -0,0 +1,66 @@
+# Topology And Trust Administration UI
+
+## Module
+Web
+
+## Status
+VERIFIED
+
+## Description
+Shipped the canonical `Setup > Topology` and `Setup > Trust & Signing` cutover so operators land on mounted setup shells instead of stale `settings`, `administration`, `admin`, or `platform/setup` routes. The topology shell now exposes the preserved setup pages directly, and the trust workspace replaces the live placeholder settings page.
+
+## Implementation Details
+- **Feature directories**:
+  - `src/Web/StellaOps.Web/src/app/features/topology/`
+  - `src/Web/StellaOps.Web/src/app/features/trust-admin/`
+  - `src/Web.StellaOps.Web/src/app/features/platform/setup/`
+  - `src/Web.StellaOps.Web/src/app/features/settings/`
+- **Primary components**:
+  - `topology-shell` (`src/Web.StellaOps.Web/src/app/features/topology/topology-shell.component.ts`)
+  - `trust-admin` (`src/Web.StellaOps.Web/src/app/features/trust-admin/trust-admin.component.ts`)
+  - `platform-setup-home` (`src/Web.StellaOps.Web/src/app/features/platform/setup/platform-setup-home.component.ts`)
+- **Canonical routes**:
+  - `/setup/topology/overview`
+  - `/setup/topology/regions`
+  - `/setup/topology/promotion-graph`
+  - `/setup/topology/workflows`
+  - `/setup/topology/gate-profiles`
+  - `/setup/trust-signing`
+  - `/setup/trust-signing/issuers`
+  - `/setup/trust-signing/watchlist`
+  - `/setup/trust-signing/analytics`
+- **Legacy aliases**:
+  - `/platform/setup/*`
+  - `/settings/trust*`
+  - `/administration/trust*`
+  - `/admin/trust*`
+  - `/admin/issuers`
+- **Secondary entry points**:
+  - `Ops > Platform Setup`
+  - `Setup > Topology`
+  - `Setup > Trust & Signing`
+  - admin navigation bookmarks for trust and notifications
+
+## E2E Test Plan
+- **Setup**:
+  - [x] Start the local Angular test server with `npm run serve:test`.
+  - [x] Use a test session with setup and trust-read scopes.
+- **Core verification**:
+  - [x] Open `/settings/trust` and verify redirect into the canonical trust shell.
+  - [x] Open the `Trusted Issuers` tab and verify issuer data renders.
+  - [x] Open `/admin/trust` and verify bookmark compatibility into the same trust shell.
+  - [x] Open `/ops/platform-setup`, use the setup quick-link handoff, and verify navigation into canonical topology routes.
+
+## Verification
+- Run:
+  - `npm run test -- --watch=false --include src/tests/platform/platform-setup-routes.spec.ts --include src/tests/topology/topology-routes.spec.ts --include src/tests/topology/topology-shell.component.spec.ts --include src/tests/setup/setup-topology-trust-cutover.spec.ts --include src/tests/trust_admin/trust-scoring-dashboard-ui.behavior.spec.ts`
+  - `npx playwright test --config playwright.config.ts tests/e2e/topology-trust-admin-cutover.spec.ts --workers=1`
+  - `npm run build`
+- Tier 0 (source): pass
+- Tier 1 (build/tests): pass
+- Tier 2 (behavior): pass
+- Notes:
+  - Angular targeted tests passed: `5` files, `20` tests.
+  - Playwright passed: `1` topology/trust cutover scenario.
+  - Production build passed; existing bundle-budget warnings remain unchanged from the baseline.
+- Verified on (UTC): 2026-03-08T08:06:30Z