feat(users): Profile tab, dialog shell & list CRUD wiring (#36717)

[AP2300]

Closes #36717

Summary

• Ships the Users portlet Create/Edit dialog shell (4-tab strip, header, footer) with the Profile tab fully wired against the backend and inline "Coming soon" placeholders for the Roles, Permissions, and API Tokens tabs (delivered by sibling issues Users portlet: Roles tab (dual-list) #36718, Users portlet: Permissions tab (iframe embed) #36719, Users portlet: API Tokens tab #36720)
• Adds the missing user CRUD to the list flow: GET /api/v1/users/{userId} hydrates the edit dialog, POST /api/v1/users creates, PUT /api/v1/users updates (roles field intentionally omitted so backend preserves membership — see UserResource#processRoles)
• Delete flow — both from the dialog footer and the list bulk toolbar — now includes a required replacement-user picker (server-backed autocomplete over /api/v1/users/filter, excludes the users being deleted). Previously deletes silently reassigned ownership to the logged-in admin.
• Fixes /users routing so the beta portlet actually lands on this UI instead of bouncing to Getting Started (PORTLET_ID_RESOLVERS.users → users-beta).

Notable non-obvious calls

• Access section is display-only in this PR: CMS Admin, Back-end, Front-end, Can Login map to backend roles (not UserForm fields), and safely editing them requires knowing the user's full role list. That's a follow-up (DWR wrapper vs. small REST endpoint decision).
• Password stays optional on update. Empty password field means "keep current" — matches how UserForm handles password already; no client-side hack needed.
• Show Getting Started toggle has no backend field; kept in the UI as informational, not persisted. To be revisited if the value is needed elsewhere.

Test plan

• Create user via the "New" button — required fields validated, password ≥ 6 chars, confirm-match enforced; on Save a new row appears in the list
• Edit user via row click — dialog hydrates from list-item data instantly, then background-fetches additionalInfo (prefix/suffix/title/company/website); on Save, changes persist and the list reloads
• Toggle Active on/off via the Profile field — persists on save
• Delete user via the dialog footer — replacement picker required, cannot pick the same user; typed-email confirmation required; on confirm, list reloads
• Bulk-delete N users from the toolbar — replacement picker required, cannot pick any of the selected; on confirm, list reloads
• Placeholder tabs render "Coming soon" and don't interfere with Profile Save
• pnpm nx test portlets-dot-users-portlet — 56 passing
• pnpm nx test data-access --testPathPatterns=dot-router — 46 passing
• pnpm nx lint portlets-dot-users-portlet — clean

Follow-ups (each on its own branch/PR already prepared)

• Users portlet: Roles tab (dual-list) #36718 — Roles tab (dual-list shuttle)
• Users portlet: Permissions tab (iframe embed) #36719 — Permissions tab (iframe embed + JSP bridge)
• Users portlet: API Tokens tab #36720 — API Tokens tab (table + request sub-dialog)

🤖 Generated with Claude Code