Adopt design comps: dark system, new landing/auth, dashboard shell + canvas

Re-skins the whole app to the dark design comps and wires the new surfaces to
the backend (the /api proxy + auth + schemas are unchanged).

Design system:
- globals.css: remapped @theme tokens to the comp palette (#08080a base, coral
  #ff6f61, status cyan/green/amber/purple/teal); token names preserved
- MeshMark: triangle + 3-node brand glyph; cm-flow/cm-blink/cm-halo keyframes
- marketing flipped light → dark

Backend (migration 0012):
- agents.model_binding (persisted on team deploy) + GET /api/claws/{id}/runtime-config
- routine_runs table + scheduler journaling + GET /api/routines/runs
- GET /api/claws/{id}/compartments (anatomy aggregate)
- GET /api/structure/stats (workspace counts)

Frontend:
- Landing: full dark marketing page (hero constellation, deploy ladder,
  12-topology taxonomy, recursive execution, compare/Pareto, safety, self-host)
- Auth: dark split-panel AuthShell + comp LoginForm + Clerk SignIn themed dark
- Dashboard shell: TopBar (breadcrumb + live stats + deploy + user) + StatusBar
  (runner/sandbox/doors); rail slimmed to 60px + 252px context column
- ConstellationCanvas (radial recursive) replaces the graph view in StructureCanvas;
  selecting a claw opens ComputerPanel (apps/now-running/dock); RoutinesPanel
- Claw anatomy view (/claws/[id]/anatomy) from compartments + runtime-config

Co-Authored-By: Claude Opus 4.8 <[email protected]>

crates/cm-db/src/repo/agents.rs

@@ -76,6 +76,34 @@ pub async fn get(pool: &PgPool, agent_id: AgentId) -> Result<Agent, DbError> {
     })
 }
 
+/// Persist the model a claw was deployed with (e.g. "claude", "gemini",
+/// "glm-5.2") — the runtime config is otherwise the only record of it.
+pub async fn set_model_binding(
+    pool: &PgPool,
+    agent_id: AgentId,
+    model: &str,
+) -> Result<(), DbError> {
+    sqlx::query!(
+        "UPDATE agents SET model_binding = $2 WHERE id = $1 AND deleted_at IS NULL",
+        agent_id.as_uuid(),
+        model,
+    )
+    .execute(pool)
+    .await?;
+    Ok(())
+}
+
+/// The persisted model binding for a claw, if any (NULL for pre-team claws).
+pub async fn model_binding(pool: &PgPool, agent_id: AgentId) -> Result<Option<String>, DbError> {
+    let row = sqlx::query!(
+        "SELECT model_binding FROM agents WHERE id = $1 AND deleted_at IS NULL",
+        agent_id.as_uuid(),
+    )
+    .fetch_one(pool)
+    .await?;
+    Ok(row.model_binding)
+}
+
 /// Patch-style profile update (§7.7 Edit profile): only provided fields
 /// change; the system prompt is the Job Description textarea verbatim.
 #[allow(clippy::too_many_arguments)]