fix: extend architecture validation to vendor/shared JS files

- Include static/vendor/js and static/shared/js in JS validation
- Fix onboarding.js: use apiClient (not window.apiClient), use logger
- Fix onboarding.js: use relative paths (not /api/v1/ prefix)
- Add noqa comments for standalone pages (login, onboarding)
- Add ...data() to messages.js for layout inheritance

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>

scripts/validate_architecture.py

@@ -2689,7 +2689,12 @@ class ArchitectureValidator:
         """Validate JavaScript patterns"""
         print("🟨 Validating JavaScript...")
 
-        js_files = list(target_path.glob("static/admin/js/**/*.js"))
+        # Include admin, vendor, and shared JS files
+        js_files = (
+            list(target_path.glob("static/admin/js/**/*.js"))
+            + list(target_path.glob("static/vendor/js/**/*.js"))
+            + list(target_path.glob("static/shared/js/**/*.js"))
+        )
         self.result.files_checked += len(js_files)
 
         for file_path in js_files: