Redesign Workbench shell as operator console

[smithaldon1]

Closes #214

Summary

• Redesign the Workbench shell around a persistent operator-console sidebar and status strip.
• Preserve existing Sentinel routes for Overview, Detections, Recommendations, and RCA/CAPA Draft.
• Add planned navigation slots for Connections, Protocol Diagnostics, and Tag/Source Browser without implementing those pages or any production writeback controls.
• Preserve simulator-backed demo safety language in the shared shell.

Test Evidence

• npm test - passed, 14 tests.
• npm run lint - passed.
• npm run typecheck - passed.
• npm run build - passed.
• npm run test:e2e - blocked by existing Docker-exposed services on ports 8000 and 3000; 127.0.0.1:8000/health returned {"status":"ok","service":"rest-api"}.
• npx playwright test --config /private/tmp/fip-issue214.playwright.config.js against alternate ports 8001/3001 - passed, 1 test.
• Rendered QA: page title Operations Workbench, sidebar/status strip detected, no console warnings/errors, screenshots saved under /private/tmp/fip-214-*.png.
• make docs - passed placeholder docs target.
• make lint - passed.
• make typecheck - passed.
• make test - passed, 239 tests.
• git diff --check and git diff --cached --check - passed.

Docs Impact

• Updated apps/web/README.md with operator-console shell notes and planned protocol slots.
• Updated docs/LEARNING_LOG.md.

Follow-up Work

• Implement 6. Feature: Add Connections page for OPC-UA, MQTT, and BACnet #212 next: Connections page.
• Keep live protocol diagnostics, tag/source browsing, and production writeback controls out of this shell PR.