feat: bootstrap 2 users, tenant, org-scoped tokens, platform admin UI

Bootstrap script now creates:
- SaaS Owner (admin/admin) with platform-admin role
- Tenant Admin (camel/camel) in Example Tenant org
- Traditional Web App for cameleer3-server OIDC
- DB records: tenant, default environment, license
- Configures cameleer3-server OIDC via its admin API
All credentials configurable via env vars.

Backend:
- Fix LogtoManagementClient resource URL (https://default.logto.app/api)
- Add getUserRoles/getUserOrganizations to LogtoManagementClient
- Add GET /api/me endpoint (user info, platform admin status, tenants)
- Add GET /api/tenants list-all for platform admins
- Remove insecure X-header forwarding from Traefik

Frontend:
- Org-scoped tokens: getAccessToken(resource, orgId) for tenant context
- OrgResolver component populates org store from /api/me
- useOrganization Zustand store (currentOrgId + currentTenantId)
- Platform admin sidebar section + AdminTenantsPage
- View Dashboard link points to cameleer3-server on port 8081

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

ui/src/auth/useOrganization.ts

@@ -0,0 +1,31 @@
+import { create } from 'zustand';
+
+export interface OrgInfo {
+  id: string;         // Logto org ID (for token scoping)
+  name: string;
+  slug?: string;
+  tenantId?: string;  // DB tenant UUID (for API calls)
+}
+
+interface OrgState {
+  currentOrgId: string | null;      // Logto org ID — used for getAccessToken(resource, orgId)
+  currentTenantId: string | null;   // DB UUID — used for API calls like /api/tenants/{id}
+  organizations: OrgInfo[];
+  isPlatformAdmin: boolean;
+  setCurrentOrg: (orgId: string | null) => void;
+  setOrganizations: (orgs: OrgInfo[]) => void;
+  setIsPlatformAdmin: (value: boolean) => void;
+}
+
+export const useOrgStore = create<OrgState>((set, get) => ({
+  currentOrgId: null,
+  currentTenantId: null,
+  organizations: [],
+  isPlatformAdmin: false,
+  setCurrentOrg: (orgId) => {
+    const org = get().organizations.find((o) => o.id === orgId);
+    set({ currentOrgId: orgId, currentTenantId: org?.tenantId ?? null });
+  },
+  setOrganizations: (orgs) => set({ organizations: orgs }),
+  setIsPlatformAdmin: (value) => set({ isPlatformAdmin: value }),
+}));