ADR-013 Phase 4: relocate 4 self-contained plugin frontends

Relocate applications, geenforce, knowledgebase, and machines - each owns only
its own views dir, so a clean move to plugins/<name>/frontend/ (views/ +
routes.js, core imports rewritten to @/). geenforce's entryForm.js helper + its
vitest spec move with it (ManifestEditor imports it as a sibling).

Machinery fixes this batch surfaced:
- routes.gen.js codegen uses namespace imports (import * as p_x). A route file
  without a `toplevel` export is undefined on the namespace instead of a strict-
  ESM missing-binding build error.
- vitest gains a `pretest` stage so plugin-frontend specs (now under
  plugins/<name>/frontend/) run from their staged copy in src/.plugins-staged/.

Verified live: GE-Enforce (the most complex, uses the entryForm sibling helper)
renders fully from its staged frontend. Build + 58 vitest + naming green.

frontend/src/router/routes/applications.js

@@ -1,27 +0,0 @@
-/**
- * Applications routes (core feature)
- */
-export default [
-  {
-    path: 'applications',
-    name: 'applications',
-    component: () => import('../../views/applications/ApplicationsList.vue')
-  },
-  {
-    path: 'applications/new',
-    name: 'application-new',
-    component: () => import('../../views/applications/ApplicationForm.vue'),
-    meta: { requiresAuth: true }
-  },
-  {
-    path: 'applications/:id',
-    name: 'application-detail',
-    component: () => import('../../views/applications/ApplicationDetail.vue')
-  },
-  {
-    path: 'applications/:id/edit',
-    name: 'application-edit',
-    component: () => import('../../views/applications/ApplicationForm.vue'),
-    meta: { requiresAuth: true }
-  }
-]

frontend/src/router/routes/geenforce.js

@@ -1,30 +0,0 @@
-/**
- * GE-Enforce plugin routes.
- *
- * A top-level section (not under /settings) - the manifest editor + fleet
- * reports are a large operational surface, so they get their own full-width
- * shell with tabs. meta.plugin = 'geenforce' so the ADR-009 guard hides the
- * section when the plugin is disabled. Admin-only.
- */
-export default [
-  {
-    path: 'geenforce',
-    component: () => import('../../views/geenforce/GeEnforceLayout.vue'),
-    meta: { requiresAuth: true, requiresAdmin: true, plugin: 'geenforce' },
-    children: [
-      { path: '', redirect: '/geenforce/manifests' },
-      {
-        path: 'manifests',
-        name: 'geenforce-manifests',
-        component: () => import('../../views/geenforce/ManifestEditor.vue'),
-        meta: { requiresAuth: true, requiresAdmin: true, plugin: 'geenforce' }
-      },
-      {
-        path: 'reports',
-        name: 'geenforce-reports',
-        component: () => import('../../views/geenforce/EnforcementReports.vue'),
-        meta: { requiresAuth: true, requiresAdmin: true, plugin: 'geenforce' }
-      }
-    ]
-  }
-]

frontend/src/router/routes/knowledgebase.js

@@ -1,29 +0,0 @@
-/**
- * Knowledge Base plugin routes
- */
-export default [
-  {
-    path: 'knowledgebase',
-    name: 'knowledgebase',
-    component: () => import('../../views/knowledgebase/KnowledgeBaseList.vue'),
-    meta: { plugin: 'knowledgebase' }
-  },
-  {
-    path: 'knowledgebase/new',
-    name: 'knowledgebase-new',
-    component: () => import('../../views/knowledgebase/KnowledgeBaseForm.vue'),
-    meta: { requiresAuth: true, plugin: 'knowledgebase' }
-  },
-  {
-    path: 'knowledgebase/:id',
-    name: 'knowledgebase-detail',
-    component: () => import('../../views/knowledgebase/KnowledgeBaseDetail.vue'),
-    meta: { plugin: 'knowledgebase' }
-  },
-  {
-    path: 'knowledgebase/:id/edit',
-    name: 'knowledgebase-edit',
-    component: () => import('../../views/knowledgebase/KnowledgeBaseForm.vue'),
-    meta: { requiresAuth: true, plugin: 'knowledgebase' }
-  }
-]

frontend/src/router/routes/machines.js

@@ -1,29 +0,0 @@
-/**
- * Machines plugin routes
- */
-export default [
-  {
-    path: 'machines',
-    name: 'machines',
-    component: () => import('../../views/machines/MachinesList.vue'),
-    meta: { plugin: 'machines' }
-  },
-  {
-    path: 'machines/new',
-    name: 'machine-new',
-    component: () => import('../../views/machines/MachineForm.vue'),
-    meta: { requiresAuth: true, plugin: 'machines' }
-  },
-  {
-    path: 'machines/:id',
-    name: 'machine-detail',
-    component: () => import('../../views/machines/MachineDetail.vue'),
-    meta: { plugin: 'machines' }
-  },
-  {
-    path: 'machines/:id/edit',
-    name: 'machine-edit',
-    component: () => import('../../views/machines/MachineForm.vue'),
-    meta: { requiresAuth: true, plugin: 'machines' }
-  }
-]