Consume the team + record bootstrap endpoints

What changed

Trust boundary (HR-21 / HR-22)

Both new gateway methods fetch as unknown and pass through assertContract against the generated teamBootstrapResponseSchema / recordBootstrapResponseSchema before any caller trusts the payload. Types and Zod schemas come only from src/gen, synced from pramaan-functions main (5776381) as the first commit of this PR. A drifted aggregate logs api_contract_violation and throws.

Where it lives

• src/lib/members/gateway.ts — teamBootstrap(): one read of /firm/team/bootstrap, assertContract on TeamBootstrapResponse.
• src/lib/matters/gateway.ts — recordBootstrap(matterId): one read of /matters/{id}/record/bootstrap, assertContract on RecordBootstrapResponse.
• src/app/[locale]/(workspace)/settings/firm/team/page.tsx — one bootstrap call + three setQueryData seeds; invitations prefetch unchanged.
• src/app/[locale]/(workspace)/matters/[matterId]/record/page.tsx — one bootstrap call; props from the composed payload; saved-views seed gated on the flag.
• openapi/app-api.json + src/gen/** — mirror sync picking up the two new aggregate DTOs (first commit).
• tests/unit/team-bootstrap-contract.test.ts, tests/unit/record-bootstrap-contract.test.ts — full-shape parse + gateway no-store + drift-rejection coverage.

Verify

pnpm lint
pnpm test
pnpm build

• Team one bootstrap round-trip for the 3 server resources (was 3); members/seats/roles render with no refetch flash.
• Invitations still client-side Clerk — behavior unchanged.
• Record one bootstrap round-trip (was 3–4); matter / participants / documents render from the composed payload.
• Empty first-run new firm (no extra members) and a matter with zero documents render their real zero states — not a fixture.
• Degrade savedViewsAvailable=false skips cache seeding; the register hook fetches live.
• Contract a drifted aggregate logs api_contract_violation and throws at the gateway.

Files changed

29 file(s), +2970 / -60 lines