frontend: add npm workspace scaffold under frontend/

Phase 1 of the backend/frontend code split (#273). Additive — no
existing code is touched; the legacy hive-c0re/assets, hive-ag3nt/
assets and hive-fr0nt/assets trees stay in place until the Rust
cutover later in this branch.

Layout:
  frontend/package.json                       npm workspaces root
  frontend/packages/shared/                   @hive/shared
    src/{base,terminal}.css + terminal.js     (ES module)
    src/index.js                              re-exports terminal.js
  frontend/packages/dashboard/                @hive/dashboard
    src/{index.html, app.js, dashboard.css}   ported from hive-c0re/assets
    build.mjs                                 esbuild config → dist/
  frontend/packages/agent/                    @hive/agent
    src/{index,stats,screen}.html + agent.css
        + {app,stats}.js                      ported from hive-ag3nt/assets
    build.mjs                                 esbuild config → dist/

Changes vs the existing assets:
- terminal.js is an ES module exporting { create, linkify } instead
  of assigning to window.HiveTerminal. The dashboard / agent app.js
  files re-expose them on window so the IIFE bodies keep working
  unchanged through Phase 1; the global aliases can be dropped in a
  follow-up once the IIFEs are unwrapped.
- marked is imported from the marked@4.3.0 npm package (replacing
  the vendored hive-fr0nt/assets/marked.umd.js bundle).
- chart.js is imported from chart.js@4.4.4 (replacing the jsDelivr
  CDN script tag on the per-agent stats page — page now works
  offline / on operator machines without internet egress).
- dashboard.css and agent.css both gain @import lines at the top
  that pull base.css + terminal.css from @hive/shared, replacing
  the runtime string concatenation in serve_css.
- index.html / stats.html collapse from three / two script tags to
  one type="module" tag pointing at the bundled output.

package-lock.json is intentionally omitted from this commit — npm
isn't available in the iris container yet (approval pending) and the
lockfile will land in the next commit on this branch once the
toolchain is in place. The PR will not be opened until it's there.

Phase 2 (nix derivations), Phase 3 (container plumbing + the
hyperhive.frontend.extraFiles option for per-agent layering), and
Phase 4 (Rust cutover to tower_http::ServeDir, delete hive-fr0nt
+ legacy assets dirs) land as follow-up commits on this same
branch.

Refs #273.

frontend/packages/dashboard/build.mjs

@@ -0,0 +1,54 @@
+// esbuild build for @hive/dashboard. Outputs:
+//
+//   dist/app.js          bundled ES module (entrypoint = src/app.js,
+//                        pulls in @hive/shared + marked)
+//   dist/dashboard.css   bundled stylesheet (entrypoint = src/dashboard.css,
+//                        @import "@hive/shared/base.css" + terminal.css
+//                        get inlined here)
+//   dist/index.html      copy of src/index.html (esbuild doesn't process
+//                        HTML; the script/link tags reference the bundled
+//                        siblings by name)
+//
+// Both Rust binaries serve `dist/` via tower_http::ServeDir. The output
+// must keep the same filenames the existing index.html references, so
+// downstream changes are mechanical.
+
+import { build } from 'esbuild';
+import { mkdirSync, copyFileSync, rmSync } from 'node:fs';
+import { dirname, resolve } from 'node:path';
+import { fileURLToPath } from 'node:url';
+
+const here = dirname(fileURLToPath(import.meta.url));
+const src = (p) => resolve(here, 'src', p);
+const dist = (p) => resolve(here, 'dist', p);
+
+rmSync(dist(''), { recursive: true, force: true });
+mkdirSync(dist(''), { recursive: true });
+
+// Bundle the JS entry. ES-module output, browser target, no minify
+// (line-aligned source aids debugging; minification belongs in a later
+// follow-up once asset sizes warrant it).
+await build({
+  entryPoints: [src('app.js')],
+  outfile: dist('app.js'),
+  bundle: true,
+  format: 'esm',
+  platform: 'browser',
+  target: ['es2022'],
+  sourcemap: true,
+  logLevel: 'info',
+});
+
+// Bundle the CSS — esbuild resolves @import including the package
+// re-exports from @hive/shared.
+await build({
+  entryPoints: [src('dashboard.css')],
+  outfile: dist('dashboard.css'),
+  bundle: true,
+  loader: { '.css': 'css' },
+  logLevel: 'info',
+});
+
+copyFileSync(src('index.html'), dist('index.html'));
+
+console.log('dashboard build ok →', dist(''));