feat: move Apps from admin to main tab bar with container config

- Apps tab visible to OPERATOR+ (hidden for VIEWER), scoped by
  sidebar app selection and environment filter
- List view: DataTable with name, environment, updated, created columns
- Detail view: deployments across all envs, version upload with
  per-env deploy target, container config form (resources, ports,
  custom env vars) with explicit Save
- Memory reserve field disabled for non-production environments
  with info hint
- Admin sidebar sorted alphabetically, Applications entry removed
- Old admin AppsPage deleted

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

ui/src/components/sidebar-utils.ts

@@ -94,16 +94,15 @@ export function buildAppTreeNodes(
 }
 
 /**
- * Admin tree — static nodes.
+ * Admin tree — static nodes, alphabetically sorted.
  */
 export function buildAdminTreeNodes(): SidebarTreeNode[] {
   return [
-    { id: 'admin:environments', label: 'Environments', path: '/admin/environments' },
-    { id: 'admin:apps', label: 'Applications', path: '/admin/apps' },
-    { id: 'admin:rbac', label: 'Users & Roles', path: '/admin/rbac' },
     { id: 'admin:audit', label: 'Audit Log', path: '/admin/audit' },
-    { id: 'admin:oidc', label: 'OIDC', path: '/admin/oidc' },
-    { id: 'admin:database', label: 'Database', path: '/admin/database' },
     { id: 'admin:clickhouse', label: 'ClickHouse', path: '/admin/clickhouse' },
+    { id: 'admin:database', label: 'Database', path: '/admin/database' },
+    { id: 'admin:environments', label: 'Environments', path: '/admin/environments' },
+    { id: 'admin:oidc', label: 'OIDC', path: '/admin/oidc' },
+    { id: 'admin:rbac', label: 'Users & Roles', path: '/admin/rbac' },
   ];
 }