feat(llm-security): playground Fase 1 — single-file SPA skjelett [skip-docs]

Mirror av ms-ai-architect playground-arkitektur, tilpasset llm-security:

- 4 overflater (onboarding/home/catalog/project) med surface-router
- IndexedDB persistens (llm-security-playground-v1) + localStorage fallback
- Theme-bootstrap med FOUC-prevention og localStorage-persist
- 20 kommandoer i CATALOG (5 kategorier: discover/posture/findings-ops/
  hardening/adversarial/mcp-ops) med full input_fields + report_archetype
- 5-gruppers onboarding (organisasjon/scope/profil/plattform/compliance)
  med form-progress sidebar
- Home: 3 tracks + fleet-grid prosjektliste + tom-state med demo-data
- Katalog: ekspanderbare grupper med live-søk og forhåndsvisning
- Prosjekt-stub: 4 screen-tabs + 6 kategori-tabs + per-kommando
  skjema/paste-import/rapport-soner
- Demo-state: Direktoratet for digital tjenesteutvikling med 2 prosjekter
- Eksport/import (JSON envelope), action-handlers (35), modal-portal

PARSERS + RENDERERS er tomme routing-objekter — fylles i Fase 2 (10 høy-prio
kommandoer) og Fase 3 (resterende 10). Paste-import viser «parser ikke
implementert»-guide-panel for kommandoer uten parser, og lagrer rå markdown
i state for fremtidig parsing.

Vendor: 27 filer synket fra shared/playground-design-system/
(MANIFEST.json sjekksum-låst, source_commit 487f7ae).

Verifisert: node --check OK (2737 linjer, 113733 char inline JS),
HTML-tag-balanse OK. Manuell smoke-test gjenstår.

Docs (plugin README, CLAUDE.md, rot-README) bumpes ved Fase 3-fullføring
sammen med plugin.json v7.5.0. Derfor [skip-docs] her.

Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>

playground/vendor/playground-design-system/fonts/LICENSES.md

@@ -0,0 +1,42 @@
+# Font Licenses
+
+All three font families bundled with Playground Design System are licensed
+under the SIL Open Font License, Version 1.1 (OFL-1.1). They are free to
+use, modify, embed, and redistribute under the terms of OFL-1.1.
+
+Full license text per family:
+
+- **Inter** (Regular, Medium, SemiBold, Bold) — `LICENSE-Inter.txt`
+  Copyright (c) 2016 The Inter Project Authors
+  Source: https://github.com/rsms/inter
+  Version bundled: 4.0
+
+- **JetBrains Mono** (Regular, Medium, SemiBold) — `LICENSE-JetBrainsMono.txt`
+  Copyright 2020 The JetBrains Mono Project Authors
+  Source: https://github.com/JetBrains/JetBrainsMono
+  Version bundled: 2.304
+
+- **Source Serif 4** (Regular, Semibold) — `LICENSE-SourceSerif4.md`
+  Copyright 2014–2023 Adobe (Reserved Font Name "Source")
+  Source: https://github.com/adobe-fonts/source-serif
+  Version bundled: 4.005
+
+## Provenance
+
+Files in this directory were obtained from the upstream release artifacts
+linked above on 2026-05-03. Source Serif 4 woff2 files were generated locally
+from the desktop OTF release using `fonttools ttLib.woff2 compress`; all
+others are unmodified from upstream webfont releases.
+
+## Why bundled
+
+These fonts ship with the design system to eliminate runtime requests to
+external CDNs (e.g., fonts.googleapis.com). This guarantees:
+
+- No data leakage about end-user IPs / User-Agents to third parties.
+- GDPR compliance for Norwegian public-sector deployments.
+- Functioning Playgrounds in offline / air-gapped environments.
+
+Each Playground HTML loads `../shared/playground-design-system/fonts.css`,
+which declares all `@font-face` rules pointing at the .woff2 files in this
+directory.