feat(web): create new orders (MO/PO/DO) with FK pickers — finish Phase 3 CRUD

[dnplkndll]

What changed

Adds a "＋ New" order form to the Orders screen, completing Phase 3 CRUD (the create half — edit/delete already shipped in #11).

Each order type gets the right fields with foreign-key pickers sourced live from the input API:

• MO → operation · PO → item + supplier + location · DO → item + origin + destination
• shared: reference (optional — the engine auto-assigns when blank), quantity (required), end date, status (defaults to proposed).

How it's wired

• lib/records.ts — a generic CreateField type (text/number/date/select/fk), kept next to Column so RecordTable stays generic.
• lib/orders.ts — per-tab create config; createOrder (POST, surfaces the DRF validation body on error), buildCreateBody (drops blanks, normalises dates, defaults status), fetchFkOptions (loads a FK's natural keys, sorted/deduped).
• RecordTable — a create form; fk fields use a <datalist> type-ahead loaded when the form opens, degrading to free text if options can't load; the Create button is guarded on required fields.
• TabListScreen — creatable wiring (toast + reload), mirroring the editable path.
• globals.css — create-form styling in the planning-console design system.

Validation

• Frontend tsc --noEmit clean; 78 vitest tests pass (+5 for buildCreateBody + the create config shape); production next build succeeds.

(Screenshots below — captured against the built app with the API route-mocked.)

No secrets/backend needed for the shots. Per convention, not auto-merging.

Screenshots

Manufacturing order — create (operation picker + qty/date/status):

Purchase order — create (item + supplier + location pickers):

---

Self-review pass (2nd commit)

• Bug fixed: RecordTable leaked internal state (open create form + draft, edit, filter) across tab switches — open MO's create form, switch to Purchase, and it stayed open with MO's operation in the draft. Now remounts per tab (key={tabKey}).
• Coverage: extracted the FK option parsing into a pure fkOptionsFromRows and unit-tested it (name/reference → sorted, de-duped); noted fetchFkOptions reads only the first DRF page (server-side search is a follow-on).
• a11y: aria-required on required create inputs.
• Typecheck clean; 80 vitest tests pass. Screenshots unchanged (fixes are behavioral/a11y, not visual).