feat(portal-shell): v2.0 P0 shadcn standardization + security + streaming + error handling

- shadcn/ui 标准化：废弃纸感令牌，统一 bg-background/text-foreground 等
- Tailwind v4 + @theme inline，移除 tailwind.config.js
- React 19 use() + Suspense 流式渲染，首屏骨架秒出
- 三级错误边界：Route → Section → Widget 层层兜底
- 错误上报：useErrorReport → sendBeacon → /api/log mock 端点
- 三层安全边界：L1 角色门禁 / L2 权限点门禁 / L3 数据范围
- 权限位图 base36 压缩：67 权限点 → ~14 字符，JWT 体积减少 ≥ 99%
- notify 统一 Toast 封装，禁止业务直接 import sonner
- PluginBoundary 替代 PluginLoader（错误边界 + Suspense + Skeleton 三件套）

验证：typecheck 0 错误 / lint 0 错误 / build 6 路由生成成功

services/config-service/src/graphql/graphql.module.ts

@@ -13,7 +13,7 @@
  */
 import { Module } from "@nestjs/common";
 import { GraphQLModule } from "@nestjs/graphql";
-import { ApolloDriver, ApolloDriverConfig } from "@nestjs/apollo";
+import { ApolloFederationDriver, ApolloDriverConfig } from "@nestjs/apollo";
 import { join } from "node:path";
 import { GraphqlContext } from "@edu/shared-ts/federation";
 import { ConfigModule } from "../config-config/config.module.js";
@@ -27,7 +27,7 @@ import { DataLoaderService } from "./dataloader.service.js";
   imports: [
     ConfigModule,
     GraphQLModule.forRoot<ApolloDriverConfig>({
-      driver: ApolloDriver,
+      driver: ApolloFederationDriver,
       // Federation 2 子图
       autoSchemaFile: {
         path: join(process.cwd(), "src/graphql/generated/schema.graphql"),