feat: production routing support for subdomain and custom domain modes

Double-mount store routes at /store/* and /store/{store_code}/* so the
same handlers work in dev path-based, prod path-based, prod subdomain,
and prod custom-domain modes.  Wire StorePlatform.custom_subdomain into
StoreContextMiddleware for per-platform subdomain overrides.  Add admin
custom-domain management UI, fix stale /shop/ reset link, add
/merchants/ to reserved paths, and server-render window.STORE_CODE for
JS that previously parsed the URL.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

app/modules/customers/routes/api/storefront.py

@@ -262,7 +262,7 @@ def forgot_password(request: Request, email: str, db: Session = Depends(get_db))
 
             scheme = "https" if should_use_secure_cookies() else "http"
             host = request.headers.get("host", "localhost")
-            reset_link = f"{scheme}://{host}/shop/account/reset-password?token={plaintext_token}"
+            reset_link = f"{scheme}://{host}/account/reset-password?token={plaintext_token}"
 
             email_service = EmailService(db)
             email_service.send_template(

app/modules/customers/routes/pages/store.py

@@ -6,11 +6,15 @@ Store pages for customer management:
 - Customers list
 """
 
-from fastapi import APIRouter, Depends, Path, Request
+from fastapi import APIRouter, Depends, Request
 from fastapi.responses import HTMLResponse
 from sqlalchemy.orm import Session
 
-from app.api.deps import get_current_store_from_cookie_or_header, get_db
+from app.api.deps import (
+    get_current_store_from_cookie_or_header,
+    get_db,
+    get_resolved_store_code,
+)
 from app.modules.core.utils.page_context import get_store_context
 from app.modules.tenancy.models import User
 from app.templates_config import templates
@@ -24,11 +28,11 @@ router = APIRouter()
 
 
 @router.get(
-    "/{store_code}/customers", response_class=HTMLResponse, include_in_schema=False
+    "/customers", response_class=HTMLResponse, include_in_schema=False
 )
 async def store_customers_page(
     request: Request,
-    store_code: str = Path(..., description="Store code"),
+    store_code: str = Depends(get_resolved_store_code),
     current_user: User = Depends(get_current_store_from_cookie_or_header),
     db: Session = Depends(get_db),
 ):