Loading issues
Build the first layer of the operator console: a verified-staff-only API for application totals and a searchable, bounded workspace directory with membership/project/issue counts. Reject guests, ordinary users, service keys and workspace API keys, including staff narrowed by a key. Read-only customer-data access must have a durable actor/request audit trail. Add authorization, real Postgres and HTTP contract coverage; regenerate OpenAPI. Stack layer 1 of 3; following layers add support actions and UI. Architecture rules 3, 12, 17, 24 apply. Root PR targets current application branch main, since rebuild has already merged.
Implemented in stack layer 1: https://github.com/ParadauxIO/taskl.ie/pull/94 (base main). Verified on the final stack: all 1,315 backend tests pass, including PostgreSQL, authorization, HTTP contract and architecture checks; frontend lint/types and 1,203 unit tests pass. New additive V47 operator audit migration; unrestricted verified staff only. Following PRs add tenant support and the console.
Implementation plan: three dependent PRs, API directory/statistics → support diagnostics/actions → console. Verify with staff/ordinary-user/key rejection tests, real Postgres tenant isolation and atomic auditing, generated OpenAPI, frontend lint/types/unit/story checks and browser evidence. Remote main includes the merged rebuild; root PR will target main, following PRs their preceding stack branch.