swarm-ui: bootstrap new swarm-level frontend (Preact + wouter + TS + JSX)

Project-bootstrap scope per the issue: static build as a nix pkg,
empty start page for now, functionality deferred until auth against
authelia is figured out. Stack (Preact + wouter + TypeScript + JSX)
matches the shell decision from the earlier framework-paths thread —
a real SPA shell with a router and deep links, distinct from the
per-hive dashboard's vanilla-JS + custom-element MPA.

- New npm workspace frontend/packages/swarm-ui: one route (/), a
  wouter Switch/Route shell, a 404 fallback. Reuses @hive/shared's
  colors.css/theme.css/base.css for visual consistency; no other
  shared JS (the vanilla-JS el()/dom.js helpers are superseded by
  Preact in this shell).
- nix/packages/swarm-ui.nix: its own buildNpmPackage derivation
  (scoped to just this workspace via an explicit buildPhase), not
  folded into nix/packages/frontend.nix's packages.default closure —
  same reasoning swarm-controller/swarmctl already use for staying out
  of daemonBins: a hive that doesn't run the swarm controller
  shouldn't carry swarm-ui bytes.
- npmDepsHash recomputed in both frontend.nix and swarm-ui.nix (same
  shared lockfile, new deps: preact, wouter-preact, typescript).
- Added swarm-ui to nix/checks.nix alongside frontend, for the same
  FOD-staleness reason plus being the only thing that actually builds
  it in CI (not in packages.default's closure like frontend is, so
  nix flake check wouldn't otherwise touch it).
- npm run typecheck (tsc --noEmit) is available locally; not yet wired
  into CI — esbuild transpiles TS without type-checking, so that's a
  real gap, left as a follow-up rather than growing this bootstrap PR
  with a new CI workflow step.

Verified: nix build .#swarm-ui and .#frontend both succeed; npm run
build (root, all workspaces) succeeds; tsc --noEmit clean;
scripts/check-issue-refs.sh clean.

CLAUDE.md

@@ -173,7 +173,10 @@ hand-maintained per-file tree drifts out of sync with the code.
 - **`frontend/`** — npm workspaces → static dashboard + per-agent UI
   dist, built hermetically by `nix/packages/frontend.nix`. Packages:
   `shared` (terminal pane + Catppuccin palette), `dashboard` (the
-  operator SPA), `agent` (the default per-container UI).
+  operator SPA), `agent` (the default per-container UI), `swarm-ui`
+  (swarm-level UI shell — Preact + wouter + TypeScript + JSX, project-
+  bootstrap scope; packaged separately by `nix/packages/swarm-ui.nix`,
+  not bundled into `packages.default`'s closure — see that file).
 - **`nix/`** — `host-modules/` (the host stack: hyperhive core options,
   `hive-{c0re,priv,forge,gateway,matrix,network,tls,ci}`, otel, swarm),
   `agent-modules/` (the per-agent harness feature modules),