chore: auto-commit (23 archivos)

- app.md
- backend/dist/assets/index-CFDWXN9Z.js
- backend/dist/index.html
- backend/handlers.go
- backend/main.go
- backend/users.go
- e2e/smoke_live.sh
- frontend/src/App.tsx
- frontend/src/api.ts
- frontend/src/components/CardChatPanel.tsx
- ...

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>

e2e/smoke_live.sh

@@ -17,7 +17,7 @@ set -uo pipefail
 
 BACKEND="${BACKEND:-http://127.0.0.1:8095}"
 PROXY="${PROXY:-http://127.0.0.1:5180}"
-EXPECTED_VERSION="${EXPECTED_VERSION:-0.2.0}"
+EXPECTED_VERSION="${EXPECTED_VERSION:-0.3.0}"
 
 fail() { echo "FAIL: $*" >&2; exit 1; }
 ok()   { echo "OK   $*"; }
@@ -72,5 +72,20 @@ code=$(curl -sS -o /dev/null -w '%{http_code}' -m 5 \
 [[ "$code" != "404" ]] || ok "card chat ws path resolved ($code)"
 ok "card chat WS route present (status $code)"
 
+# 7. /api/modules — admin gated (401 unauthenticated).
+code=$(curl -sS -o /dev/null -w '%{http_code}' -m 5 "$BACKEND/api/modules")
+[[ "$code" == "401" ]] || fail "/api/modules returned $code, want 401"
+ok "modules CRUD gated 401"
+
+# 8. /api/modules/__nope__/test — exists (401 anonymous).
+code=$(curl -sS -o /dev/null -w '%{http_code}' -m 5 -X POST "$BACKEND/api/modules/__nope__/test")
+[[ "$code" == "401" ]] || fail "module test returned $code, want 401"
+ok "modules test endpoint present"
+
+# 9. bundle ships modules UI.
+for needle in "/modules" "/modules/__draft__/test" "ModulesModal" "is_admin" "jira"; do
+    grep -q "$needle" "$js_tmp" && ok "bundle has '$needle'" || true
+done
+
 echo
-echo "PASS — kanban $EXPECTED_VERSION serving notifications/streaming UI"
+echo "PASS — kanban $EXPECTED_VERSION serving notifications + streaming + modules UI"