chore: final cleanup — dead link, security status, showTitle, drop subscriptions

1. CompleteStep: /apps → / ("Workbench" instead of dead "Alle Apps")
2. pnpm lockfile synced after @mana/subscriptions removal
3. Security header panel: status dots for Passkey/2FA/Sessions count
4. GeneralSection: inline settings rows replace GlobalSettingsSection
   wrapper — no more title="" hack or double-card nesting
5. shared-auth-ui: showTitle prop on PasskeyManager, SessionManager,
   TwoFactorSetup, AuditLog; SecuritySection passes showTitle={false}
6. Drop @mana/subscriptions from sources.css + package.json

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

packages/shared-auth-ui/src/components/TwoFactorSetup.svelte

@@ -39,6 +39,7 @@
 			password: string
 		) => Promise<{ success: boolean; backupCodes?: string[]; error?: string }>;
 		primaryColor?: string;
+		showTitle?: boolean;
 		translations?: Partial<TwoFactorSetupTranslations>;
 	}
 
@@ -48,6 +49,7 @@
 		onDisable,
 		onGenerateBackupCodes,
 		primaryColor = '#6366f1',
+		showTitle = true,
 		translations = {},
 	}: Props = $props();
 
@@ -168,7 +170,7 @@
 <div class="two-factor-setup">
 	{#if view === 'status'}
 		<div class="section-header">
-			<h3 class="section-title">{t.title}</h3>
+			{#if showTitle}<h3 class="section-title">{t.title}</h3>{/if}
 			<div class="status-badge" class:status-enabled={enabled} class:status-disabled={!enabled}>
 				<span class="status-dot"></span>
 				{enabled ? t.statusEnabled : t.statusDisabled}