M1: OrgBoard — organizations, teams, seats, the board & cartable

OrgBoard module (references SharedKernel only; RBAC via ICurrentUser/IPermissionService):
- Organization, Team, Seat (human/open/ai), WorkItem (board task: type, status, assignee,
  parent) entities; internal OrgBoardDbContext (schema "orgboard") + InitialOrgBoard
  migration; design-time factory. (WorkItem avoids the System.Threading.Tasks.Task clash.)
- Endpoints under /api/orgboard, every mutation permission-checked at the scope chain
  [team, org]: POST /organizations, POST/GET /teams, POST /tasks, GET /board (columns
  backlog->in progress->in review->done), PATCH /tasks/{id}/move, /assign, GET /cartable.

Test isolation: integration tests now use IClassFixture so each class gets its own
pgvector container (the bootstrap-once rule made a shared container collide).

Verified: build green; ArchitectureTests 8/8 (OrgBoard references only SharedKernel);
IntegrationTests 12/12 incl. a new board flow — owner sets up org+team, creates/moves/
assigns a task, sees it on the board and in the cartable; an invited Member can view the
board but is 403'd from creating a team.

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>

tests/TeamUp.IntegrationTests/BootAndMigrateTests.cs

@@ -10,8 +10,7 @@ namespace TeamUp.IntegrationTests;
 /// extension + the 7 module schemas), health is green, every module endpoint seam is wired, and
 /// the OpenAPI document is served. All tests share one container (sequential, same collection).
 /// </summary>
-[Collection(PostgresCollection.Name)]
-public sealed class BootAndMigrateTests(PostgresFixture postgres)
+public sealed class BootAndMigrateTests(PostgresFixture postgres) : IClassFixture<PostgresFixture>
 {
     private static readonly string[] ExpectedSchemas =
         ["identity", "orgboard", "skills", "integrations", "memory", "assembler", "governance"];