Implement WP-0009-T04: Control Plane interactive UI on whynot-design

Builds the Control Plane's browser UI (login, dashboard, Phase
registration, Development Credit entry/proposal/review, credential
admin, audit log) as a FastAPI + Jinja2 app over the already-finished
T03 backend, rather than from scratch — whynot-design's Lit web
components are vendored as static assets (source commit 4b62cffc,
v0.4.1), with lit itself resolved via an esm.sh CDN import map.

Session auth re-checks the credential token against the database on
every request rather than trusting the session cookie's cached rights,
so a mid-session revocation takes effect immediately.

9 new Docker-gated HTTP-level tests via FastAPI's TestClient (no
browser-automation tool available, so real rendering of the <wn-*>
components was never visually verified). All four WP-0009 tasks are
now done; workplan marked finished.

Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>

src/target_revenue/service/control_plane_templates/dashboard.html

@@ -0,0 +1,29 @@
+{% extends "base.html" %}
+{% block title %}Dashboard — Target Revenue Control Plane{% endblock %}
+{% block content %}
+<wn-page-header>
+  <span slot="title">Phases for {{ session_licensor_id }}</span>
+</wn-page-header>
+
+{% if session_rights in ("operator", "admin") %}
+<p><a href="/phases/new">+ Register a new Phase</a></p>
+{% endif %}
+
+{% if phases %}
+<table class="wn-plain">
+  <thead><tr><th>Phase</th><th>Milestone Release</th><th>Initial Target</th><th></th></tr></thead>
+  <tbody>
+  {% for phase in phases %}
+    <tr>
+      <td>{{ phase.phase.id }}</td>
+      <td>{{ phase.phase.milestone_release.name }}</td>
+      <td>{{ phase.phase.initial_target.amount }} {{ phase.phase.initial_target.currency }}</td>
+      <td><a href="/phases/{{ phase.phase.id }}">View</a></td>
+    </tr>
+  {% endfor %}
+  </tbody>
+</table>
+{% else %}
+<wn-empty-state>No Phases registered yet for this tenant.</wn-empty-state>
+{% endif %}
+{% endblock %}