obs: New Relic browser agent + VITE_COMMIT_ID + ErrorBoundary (track 8/8)

Adds @newrelic/browser-agent for SPA error reporting, AJAX failure tracking,
and SPA route navigation tracking. Stamps every event with the dashboard's
build SHA (VITE_COMMIT_ID) so frontend errors correlate to the same commit
identifier the api/worker/provisioner Go services emit via -ldflags.

- vite.config.ts: define VITE_COMMIT_ID from GIT_SHA env (defaults "dev"),
  plus VITE_NEWRELIC_LICENSE_KEY + VITE_NEWRELIC_APP_ID at build time
- src/main.tsx: init BrowserAgent before React mount, fail-open when license
  key absent (mirrors Go services on empty NEW_RELIC_LICENSE_KEY)
- src/components/ErrorBoundary.tsx: top-level boundary that catches render
  errors, ships them via window.newrelic.noticeError with commit_id attr,
  renders an inline fallback so users can reload
- src/components/ErrorBoundary.test.tsx: 5 unit tests (happy path, error
  catch + fallback, NR noticeError with commit_id, no-crash when agent
  absent, custom fallback override)
- .github/workflows/deploy-pages.yml: export GIT_SHA before npm run build
  and expose VITE_NEWRELIC_* secrets

Tests: 209 passed | 3 skipped (was 204 | 3). Build smoke verified —
GIT_SHA=test123abc produces `commit_id:"test123abc"` in dist/assets/index-*.js.

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>

Author: mastermanas805

.github/workflows/deploy-pages.yml

@@ -24,9 +24,19 @@ jobs:
           node-version: '20'
           cache: 'npm'
       - run: npm ci
+      # Compute the short SHA of HEAD here so vite.config.ts can splice it
+      # into the bundle (define: VITE_COMMIT_ID). Mirrors what the Go services
+      # do via -ldflags so every frontend error reported to New Relic carries
+      # the same build identifier the api/worker/provisioner logs use.
+      - name: Export GIT_SHA
+        run: echo "GIT_SHA=$(git rev-parse --short HEAD)" >> "$GITHUB_ENV"
       - run: npm run build
         env:
           VITE_API_URL: https://api.instanode.dev
+          # New Relic browser-agent keys. Missing or empty → main.tsx skips
+          # init (fail-open), so PR forks / unconfigured envs still build cleanly.
+          VITE_NEWRELIC_LICENSE_KEY: ${{ secrets.VITE_NEWRELIC_LICENSE_KEY }}
+          VITE_NEWRELIC_APP_ID: ${{ secrets.VITE_NEWRELIC_APP_ID }}
       - run: cp dist/index.html dist/404.html
       - uses: actions/upload-pages-artifact@v3
         with: