feat(web): 用户端骨架——登录、工作台、新建项目、解析进度、读标清单

- packages/api-client：从 openapi.yaml 生成类型；cookie + CSRF / Bearer 两种鉴权、
  分片上传、fetch 读事件流（API2）
- apps/web：Vue 3 + Vite + TanStack Query，样式只来自 tokens.css / components.css（AR10）；
  扣点说明放在「开始解析」旁边（红线 9）；接口地址、路由方式运行时可配（架构 §5.2）

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

apps/web/src/lib/keys.ts

@@ -0,0 +1,12 @@
+/** TanStack Query 的查询键，集中定义，事件流按这些键让缓存失效。 */
+export const qk = {
+  me: ["me"] as const,
+  quota: ["quota"] as const,
+  plans: ["plans"] as const,
+  projects: ["projects"] as const,
+  project: (id: string) => ["project", id] as const,
+  document: (id: string) => ["document", id] as const,
+  parseJob: (id: string) => ["parse-job", id] as const,
+  checklist: (projectId: string) => ["checklist", projectId] as const,
+  checklistItems: (projectId: string) => ["checklist-items", projectId] as const,
+};