feat: storefront subscription access guard + module-driven nav + URL rename

Add StorefrontAccessMiddleware that blocks storefront access for stores
without an active subscription, returning a multilingual unavailable page
(en/fr/de/lb) for page requests and JSON 403 for API requests. Multi-platform
aware: resolves subscription for detected platform with fallback to primary.

Also includes yesterday's session work:
- Module-driven storefront navigation via FrontendType.STOREFRONT menu declarations
- shop/ → storefront/ URL rename across 30+ templates
- Subscription context (tier_code) passed to storefront templates

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

app/modules/customers/definition.py

@@ -132,6 +132,43 @@ customers_module = ModuleDefinition(
                 ],
             ),
         ],
+        FrontendType.STOREFRONT: [
+            MenuSectionDefinition(
+                id="account",
+                label_key=None,
+                order=10,
+                items=[
+                    MenuItemDefinition(
+                        id="dashboard",
+                        label_key="storefront.account.dashboard",
+                        icon="home",
+                        route="storefront/account/dashboard",
+                        order=10,
+                    ),
+                    MenuItemDefinition(
+                        id="profile",
+                        label_key="storefront.account.profile",
+                        icon="user",
+                        route="storefront/account/profile",
+                        order=20,
+                    ),
+                    MenuItemDefinition(
+                        id="addresses",
+                        label_key="storefront.account.addresses",
+                        icon="map-pin",
+                        route="storefront/account/addresses",
+                        order=30,
+                    ),
+                    MenuItemDefinition(
+                        id="settings",
+                        label_key="storefront.account.settings",
+                        icon="cog",
+                        route="storefront/account/settings",
+                        order=90,
+                    ),
+                ],
+            ),
+        ],
     },
     is_core=True,  # Customers is a core module - customer data is fundamental
     # =========================================================================