feat: move SaaS app to /platform base path, Logto becomes catch-all

Eliminates all Logto path enumeration in Traefik. Routing is now:
- /platform/* → cameleer-saas (SPA + API)
- /server/* → server-ui
- /* (catch-all) → Logto (sign-in, OIDC, assets, everything)

Spring context-path handles backend prefix transparently. No changes
needed in controllers, SecurityConfig, or interceptors.

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

ui/src/api/client.ts

@@ -1,4 +1,4 @@
-const API_BASE = '/api';
+const API_BASE = '/platform/api';
 
 let tokenProvider: (() => Promise<string | undefined>) | null = null;
 

ui/src/config.ts

@@ -11,7 +11,7 @@ export async function fetchConfig(): Promise<AppConfig> {
   if (cached) return cached;
 
   try {
-    const response = await fetch('/api/config');
+    const response = await fetch('/platform/api/config');
     if (response.ok) {
       cached = await response.json();
       return cached!;

ui/src/main.tsx

@@ -80,7 +80,7 @@ function App() {
     >
       <TokenSync resource={config.logtoResource} />
       <QueryClientProvider client={queryClient}>
-        <BrowserRouter>
+        <BrowserRouter basename="/platform">
           <AppRouter />
         </BrowserRouter>
       </QueryClientProvider>