Manage projects, members and services through the API

/api/v1/projects, /members and /services: create, list, show, update,
delete and restore, with the panel's own rules — so the MCP server can
load the collective's work, people and offer without anyone retyping
them into forms. The MCP server picks the tools up from openapi.yaml.

- Relations travel as ids and are replaced whole when sent, left alone
  when not: a project's technology_ids, service_ids and members with
  each one's role; a member's technology_ids; a service's
  technology_ids and project_ids. Record and relations are saved in
  one transaction.
- Publishing stays a permission of its own. Without projects.publish
  or services.publish, published_at, unpublish_at and is_published are
  refused — the fields the panel disables for the same people.
- MemberPolicy still lets someone edit their own profile.
- Uploads accept `for: projects` and `for: members`, landing where the
  panel's own upload fields put them.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

lang/ca/rules.php

@@ -29,6 +29,10 @@ return [
         'cannot_publish' => 'No tens permís per publicar pàgines.',
     ],
 
+    'publication' => [
+        'forbidden' => 'No tens permís per publicar ni despublicar això.',
+    ],
+
     'media' => [
         'not_an_image' => 'El fitxer no és una imatge JPEG, PNG, WebP, GIF, AVIF o SVG.',
         'remote' => [

lang/en/rules.php

@@ -29,6 +29,10 @@ return [
         'cannot_publish' => 'You do not have permission to publish pages.',
     ],
 
+    'publication' => [
+        'forbidden' => 'You do not have permission to publish or unpublish this.',
+    ],
+
     'media' => [
         'not_an_image' => 'The file is not a JPEG, PNG, WebP, GIF, AVIF or SVG image.',
         'remote' => [

lang/es/rules.php

@@ -29,6 +29,10 @@ return [
         'cannot_publish' => 'No tienes permiso para publicar páginas.',
     ],
 
+    'publication' => [
+        'forbidden' => 'No tienes permiso para publicar ni despublicar esto.',
+    ],
+
     'media' => [
         'not_an_image' => 'El fichero no es una imagen JPEG, PNG, WebP, GIF, AVIF o SVG.',
         'remote' => [