Expand standard addons, typed models/DX, and add CI for main/dev

[ATRIwOX]

Summary

Merges dev → main for sumeru_addons: major module work, typed SDK/zrefs alignment, and first-class GitHub Actions CI.

• New / expanded modules: CRM livechat, CRM mail plugin, CRM SMS, website CRM lead capture, IAP stubs; deeper account (reporting, bank, analytic), sale/purchase workflows, sale_crm quotation bridge.
• CRM / Sales / Purchase / HR / Product: typed model fields, zrefs/import-gen regen, DX wizards and views, server-side onchange/subtotals, Apps catalog category on manifests.
• Docs / tests: addon-focused README catalog; cross-module acceptance smoke tests.
• CI / toolchain: GitHub Actions on main/dev (build, test, lint, govulncheck) with sibling ProjectMeru/sumeru checkout for replace sumeru => ../sumeru; .golangci.yml + Dependabot; Go 1.26.6 and deps aligned with kernel; lint cleanups in account/sale_crm.

Test plan

• CI green on this PR (go-build, go-test, go-lint, go-vuln) against ProjectMeru/sumeru @ main/dev
• Local: go test ./... -count=1 with sibling ../sumeru present
• Install stack smoke from a workspace: product,utm,crm,sale,sale_crm,account,purchase,hr (+ optional CRM bridges)
• Spot-check CRM lead lifecycle, sale confirm, account invoice/reconcile paths touched in this branch
• Confirm Apps catalog categories group modules as expected