feat(03-01): stand up web/ npm workspace with Wave-0 hand-rolled test runner (D-01, D-02, D-11, D-14)

- web/ workspace: TS + Vite shell (maplibre-gl 6.15.0, vite 8.3.5, TS 5.9.3; no UI framework, no Telegram SDK script tag)
- tsconfig mirrors bot/ strictness byte-for-byte except the three authorized keys (DOM lib, vite/client types, resolveJsonModule)
- test/runner.mjs + harness.mjs copied verbatim from bot/test/ (body-identical past header)
- root package.json: web workspace + web:* delegate scripts
- web/src/main.ts entry module created (tsc include:['src'] needs ≥1 input; 03-02/03-03 mount here)

web/package.json

@@ -0,0 +1,21 @@
+{
+  "name": "@araharah/web",
+  "private": true,
+  "type": "module",
+  "scripts": {
+    "test": "node test/runner.mjs",
+    "typecheck": "tsc --noEmit",
+    "dev": "vite",
+    "build": "vite build",
+    "capture": "node scripts/capture.mjs"
+  },
+  "dependencies": {
+    "maplibre-gl": "^6.15.0",
+    "@araharah/theme": "*"
+  },
+  "devDependencies": {
+    "vite": "^8.3.5",
+    "typescript": "^5.9.3",
+    "playwright": "^1.50.0"
+  }
+}