feat(12.1-01): declared record actions with an applicability rule

- pact.HasAdminRecordActions with AdminRecordAction (Applies, Run)
- config_form.yaml recordActions, compiled fail-loud
- show response meta.actions lists the permitted actions that apply
- POST .../{controller}/{id}/actions/{action}: record loaded and locked
  through the form scope; 404 out of scope, 409 when it does not apply
- RecordActions.vue with confirm and request flow (mounted by plan 02)
- roster fixture, smoke tests, OpenAPI, TS types, READMEs, docs

modules/cabana/testdata/roster/lang/en/lang.yaml

@@ -8,3 +8,6 @@ people:
   activate_confirm: Activate the selected people?
   archive: Archive
   archived: The selected people were archived.
+  activated: The person was activated.
+  reinstate: Reinstate
+  reinstate_confirm: Lift the ban on this person?

modules/cabana/testdata/roster/lang/pl/lang.yaml

@@ -8,3 +8,6 @@ people:
   activate_confirm: Aktywować zaznaczone osoby?
   archive: Archiwizuj
   archived: Zaznaczone osoby zostały zarchiwizowane.
+  activated: Osoba została aktywowana.
+  reinstate: Przywróć
+  reinstate_confirm: Zdjąć blokadę z tej osoby?