feat: dead-config sweep, test suite foundation, widget settingsSchema validation

Sprint G: audited every BootstrapConfig field for a real runtime consumer
(docs/DEAD-CONFIG-AUDIT.md). Wired 3 previously-dead editable fields:
footer.logoUrl, company.address.street/contacts.phone, catalog.suggestionsEnabled.
Remaining dead fields needing a business/design decision tracked in
PRODUCT_BACKLOG.md/KNOWN-ISSUES.md, not silently left.

Sprint H: 6 new spec files (test count 57 -> 83), covering ProjectEditorFacade
(undo/redo, draft persistence, publish gating), AdminAnalyticsFacade
(never-fabricate-a-number contract), and regression coverage for this
session's carousel/hero/profile-toggle fixes.

Sprint I: widget settingsSchema (declared in widget-manifest.json, never
validated) now enforced via a new lightweight schema check in
ProjectValidator, surfaced through the existing issuesByField pipeline.
Same check reused in diagnostics so editor and diagnostics can't disagree.

Verification: tsc clean, ng build clean, 83/83 tests pass, barry-cache
validate clean (2 pre-existing unrelated warnings only).

Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>

src/app/widgets/registry/widget-manifest.service.ts

@@ -1,6 +1,6 @@
 import { Injectable } from '@angular/core';
 import { HttpClient } from '@angular/common/http';
-import { Observable, catchError, map, of, shareReplay, switchMap, take } from 'rxjs';
+import { Observable, catchError, map, of, shareReplay, switchMap, take, tap } from 'rxjs';
 import { WidgetManifestEntry, WidgetManifestFile } from '../contracts/widget-manifest.contract';
 import { ConfigService } from '../../core/config/config.service';
 
@@ -8,6 +8,8 @@ import { ConfigService } from '../../core/config/config.service';
 export class WidgetManifestService {
   private readonly fallbackManifestUrl = '/assets/mock/bootstrap/widget-manifest.json';
   private readonly manifestByUrl = new Map<string, Observable<WidgetManifestFile>>();
+  /** Last manifest resolved by getManifest(), for synchronous readers (e.g. ProjectValidator) that can't await an Observable. Mirrors ConfigService.getBootstrapSnapshot(). */
+  private manifestSnapshot: WidgetManifestFile | null = null;
 
   constructor(
     private readonly http: HttpClient,
@@ -23,6 +25,7 @@ export class WidgetManifestService {
         }
 
         const manifest$ = this.http.get<WidgetManifestFile>(manifestUrl).pipe(
+          tap(manifest => { this.manifestSnapshot = manifest; }),
           shareReplay({ bufferSize: 1, refCount: true }),
           catchError(() => of({ widgets: [] }))
         );
@@ -41,6 +44,11 @@ export class WidgetManifestService {
     return this.getWidgets().pipe(map((widgets) => widgets.find((widget) => widget.type === type)));
   }
 
+  /** Synchronous accessor for the last-resolved manifest, or null before it's loaded once. */
+  getManifestSnapshot(): WidgetManifestFile | null {
+    return this.manifestSnapshot;
+  }
+
   private resolveManifestUrl(): Observable<string> {
     const snapshotUrl = this.configService.getBootstrapSnapshot()?.widgetRegistry?.manifestUrl;
     if (snapshotUrl) {