chore: bulk commit of pre-existing changes

Includes:
- Admin dashboard layout and page updates
- API account auth module (routes, schemas, service)
- Dashboard sign-up form extraction, middleware refactor
- Marketplace proxy and middleware updates
- CORS origins expansion for dev environment
- Seed email domain correction (.com → .ma)
- Docs: create-account guide, fleet page, signup plan
- Various UI component and layout refinements

apps/dashboard/src/middleware.test.ts

@@ -54,6 +54,13 @@ afterEach(() => {
 })
 
 describe('dashboard middleware', () => {
+  it('redirects duplicate dashboard prefixes to the clean dashboard URL', async () => {
+    const { default: middleware } = await loadMiddleware()
+
+    const response = middleware(request('https://workspace.example.com/dashboard/dashboard?x=1') as never)
+
+    expect(response).toEqual({ kind: 'redirect', url: 'https://workspace.example.com/dashboard?x=1' })
+  })
 
   it('rejects middleware subrequest headers at the app layer', async () => {
     const { default: middleware } = await loadMiddleware()
@@ -64,15 +71,6 @@ describe('dashboard middleware', () => {
 
     expect(response).toEqual({ kind: 'response', body: 'Unsupported internal request header', status: 400 })
   })
-  it('deduplicates accidental repeated /dashboard prefixes before auth handling', async () => {
-    const { default: middleware } = await loadMiddleware()
-
-    const response = middleware(request('https://workspace.example.com/dashboard/dashboard/fleet') as never)
-
-    expect(response).toEqual({ kind: 'redirect', url: 'https://workspace.example.com/dashboard/fleet' })
-    expect(nextServer.redirect).toHaveBeenCalledTimes(1)
-    expect(nextServer.next).not.toHaveBeenCalled()
-  })
 
   it('redirects unauthenticated protected internal-host requests to dashboard sign-in on the resolved origin', async () => {
     const { default: middleware } = await loadMiddleware('https://rentaldrivego.example')