feat(registry): add dashboard source blocks

[yyyyaaa]

Summary

• add source-installable Sheets and Schema Builder registry roots for Dashboard consumers
• restore and document Org Chart and Storage Browser blocks
• move Command Palette into Blocks with a headless package and registry UI
• add a generic source-registry compiler, dependency contracts, and clean shadcn install smoke coverage
• align package releases, Node 24, and TanStack Table v9 on 9.0.0-beta.58
• prevent cross-identity RLS data reuse while preserving same-scope Sheets continuity

Dashboard migration contract

Dashboard consumes UI, Sheets, and Schema Builder as source through the shadcn registry. @constructive-io/data remains the published headless runtime package, and host-owned endpoints, generated SDK adapters, authentication, routing, and business logic remain outside the blocks.

Verification

• package suites: Data 234, UI 44, Sheets 634, Schema Builder 47, Command Palette 137 tests
• registry compiler: 16 tests
• Blocks docs typecheck and production build: 79 routes
• clean shadcn installs: Org Chart, Storage Browser, Sheets, Schema Builder, Command Palette
• packed-package clean consumer: ESM, CJS, stylesheets, and overlay subpaths
• registry, runtime, and public-surface contracts
• three independent adversarial audits

Release order

After merge, deploy GitHub Pages and publish the verified package versions documented in docs/RELEASING.md. The companion Dashboard PR intentionally depends on those public artifacts.

[socket-security]

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff	Package	Supply Chain Security	Vulnerability	Quality	Maintenance	License
	@​tanstack/​react-table@​9.0.0-beta.58

View full report

[yyyyaaa]

Companion Dashboard migration: https://github.com/constructive-io/dashboard/pull/249. Merge/deploy this Blocks PR and publish its verified package versions before marking the Dashboard PR ready.