Mitra Bestie §1–§3: shell + Undangan + popup + chat polish

Brings the mitra app to figma-bestie parity for Home (§1), Undangan
inbox with Curhat Baru + Perpanjang tabs (§2), and the incoming-popup
+ active-chat flow (§3). Home now lives inside a StatefulShellRoute
with BestieTabBar so Profil + Undangan + Home share one shell.

- Shell: features/shell/ (StatefulShellRoute, BestieTabBar, 3 branches)
- Undangan: features/undangan/ — Curhat Baru reads
  chatRequestProvider.pendingInvites; row Terima delegates accept to
  the notifier and ChatRequestOverlay owns nav (no double-push).
  Perpanjang tab stubbed (empty state) until backend exposes
  pendingExtensionsProvider.
- Profil: features/profile/ — Bestie-styled stub
- Home: refactored to body-only (shell owns chrome)
- Popup: chat_request_overlay + chat_request_notifier updated to
  serve the list rows, not just the modal
- Chat: mitra_chat_screen polish
- Theme: accentAmber tokens for the Perpanjang tab + halo_orb widget
  (loading spinner used by undangan list states)
- Login: replace broken GoRouterState location guard with
  _expectOtpPush flag — was stacking duplicate /otp pages on OTP
  resend (see project-otp-nav-bug-fixed-2026-05-21)

Maestro:
- 17 new flows under .maestro/flows/ts-mitra-{1,2,3}-* covering home
  online/offline variants, undangan empty/populated/tolak states,
  popup curhat-baru → accept → chat → ended banner, plus popup
  dismiss/expire/cancelled edge cases
- 4 new §A OTP flows (07/08/09/10) for invalid/mismatch/expired/cooldown
- Helper scripts: force_mitra_online/offline, force_pairing_timeout,
  force_session_expires_at, delete_mitra_status_row,
  customer_blast_now (js), customer_cancel_latest_blast
- Backend: POST /internal/_test/delete-mitra-status-row supports the
  "fresh mitra with no status row" test setup

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>

mitra_app/.maestro/scripts/customer_cancel_latest_blast.js

@@ -0,0 +1,31 @@
+// Cancel the test customer's most-recent in-flight blast (pairing request).
+// Used by ts-mitra-3-07-popup_cancelled_by_customer.yaml to drive the
+// "Permintaan dibatalkan oleh klien" stale-card UX on the mitra side
+// without waiting on any timer.
+//
+// Reads PAYMENT_SESSION_ID and TEST_CUSTOMER_JWT from `output` — both set by
+// customer_blast_now.js, so callers must run customer_blast_now.js first
+// in the same flow.
+//
+// Hits POST /api/client/chat-requests/cancel. The pairing service emits
+// `chat_request_closed reason=cancelled_by_customer` to every mitra that
+// received the blast (pairing.service.js:585-592).
+
+const backend = BACKEND_URL || 'http://localhost:3000'
+
+if (!output.PAYMENT_SESSION_ID) {
+  throw new Error('PAYMENT_SESSION_ID missing — run customer_blast_now.js first')
+}
+const token = output.TEST_CUSTOMER_JWT || TEST_CUSTOMER_JWT
+if (!token || token.startsWith('REPLACE')) {
+  throw new Error('TEST_CUSTOMER_JWT missing — customer_blast_now.js should have set output.TEST_CUSTOMER_JWT')
+}
+
+const resp = http.post(`${backend}/api/client/chat/chat-requests/cancel`, {
+  headers: { 'Content-Type': 'application/json', Authorization: `Bearer ${token}` },
+  body: JSON.stringify({ payment_session_id: output.PAYMENT_SESSION_ID }),
+})
+if (resp.status !== 200 && resp.status !== 201 && resp.status !== 204) {
+  throw new Error(`cancel-pairing failed (${resp.status}): ${resp.body}`)
+}
+console.log('cancel fired for payment_session_id:', output.PAYMENT_SESSION_ID)