chore(docs): drop apps/portal references from load-bearing files

Three load-bearing files still described the pre-WS-3 dual-SPA
reality. Surgical edits to reflect the single-SPA architecture
shipped in WS-3 PR-B (B1: portal moves; B2a: auth+routing
consolidation; B2b: server-side cookie consolidation).

CLAUDE.md:
- Quality-gates ts-reset bullet (line 27): "both SPAs" → "the SPA"
- Quality-gates Vitest bullet (lines 30-32): rewrite from "apps/portal
  has 113+ tests; apps/app currently has no Vitest setup (TECH-APP-VITEST)"
  to current truth: apps/app has Vitest with 213 tests as of PR-B2a.
  TECH-APP-VITEST is implicitly closed.
- Repository layout (line 44): drop apps/portal/ bullet; rephrase
  apps/app/ as the single workspace
- "Apps and portal architecture" → "App architecture": rewrite for
  single-workspace + two access modes. Login-based covers
  organizers + volunteers + crew + super_admin (context-routed
  in-app via useAuthStore.availableContexts); token-based covers
  artists, suppliers, press
- CORS subsection: collapse two-origin config to single origin
  (localhost:5174 dev, https://crewli.app prod). Preserve the
  existing crewli.nl marketing-only note

WS-TOOLING-001 sections (Larastan, Rector, Telescope tooling
configuration) verified untouched via `git diff CLAUDE.md`.

README.md (line 25): collapse the Applications table from two rows
(Organizer + Portal) to one (SPA). Adjust trailing sentence accordingly.

Makefile:
- .PHONY list: drop `portal`
- help echo: drop "make portal" line
- portal target: removed (the underlying `cd apps/portal && pnpm dev`
  would fail since the directory was removed in PR-B1)

Out of scope (deferred to TECH-DOCS-APPS-PORTAL-PURGE backlog item):
.cursor/ instructions, MASTER_PROMPT_*, dev-docs/SETUP, dev-docs/dev-guide,
dev-docs/CLAUDE_CODE_TOOLING. WS-3-SESSION-1C-AUDIT.md skipped (frozen
historical doc).

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>

CLAUDE.md

@@ -24,12 +24,11 @@ Design document: `/dev-docs/design-document.md`
 - `composer rector` — Rector dry-run for modernisation suggestions.
   See `/dev-docs/RECTOR.md`. Apply only in scoped sprints, never
   automatically.
-- ts-reset patches TypeScript's loosest default types in both SPAs.
+- ts-reset patches TypeScript's loosest default types in the SPA.
   See `/dev-docs/FRONTEND-TOOLING.md`. New TypeScript code adheres
   to ts-reset's stricter types automatically.
-- Vitest — `apps/portal` has 113+ tests; `apps/app` currently has
-  no Vitest setup (tracked as TECH-APP-VITEST, must close before
-  S3b lands).
+- Vitest — `apps/app` has Vitest with 213 tests as of WS-3 PR-B2a.
+  Test count grows with each PR; check `pnpm test` for current value.
 
 ## Development tooling
 
@@ -40,24 +39,23 @@ Design document: `/dev-docs/design-document.md`
 ## Repository layout
 
 - `api/` — Laravel backend
-- `apps/app/` — Organizer SPA (main product app + Platform Admin for super admins)
-- `apps/portal/` — External portal (volunteers, artists, suppliers, etc.)
+- `apps/app/` — Single SPA covering organizers, volunteers, crew, super admins (context-routed in-app) plus the public form-fill / artist-advance flows
 
-## Apps and portal architecture
+## App architecture
 
-- `apps/app/` — Organizer: event management per organisation. Includes **Platform Admin** section (`/platform/*`) for super_admin users (organisation management, user management, impersonation, activity log).
-- `apps/portal/` — External users: one app, two access modes:
-  - Login-based (`auth:sanctum`): volunteers, crew — persons with `user_id`
-  - Token-based (`portal.token` middleware): artists, suppliers, press — persons without `user_id`
+`apps/app/` — single workspace, two access modes:
+
+- Login-based (`auth:sanctum`): organizers, volunteers, crew, super_admin. Includes **Platform Admin** section (`/platform/*`) for super_admin users (organisation management, user management, impersonation, activity log). Context-aware routing inside the SPA distinguishes organizer vs. volunteer experience based on `useAuthStore.availableContexts` (see `dev-docs/AUTH_ARCHITECTURE.md`).
+- Token-based (`portal.token` middleware): artists, suppliers, press — persons without `user_id`. Stateless per-request token via `Authorization: Bearer` header or `?token=` query parameter.
 
 ### CORS
 
-Configure two frontend origins in both Laravel (`config/cors.php` via env) and the Vite dev server proxy:
+Single frontend origin in both Laravel (`config/cors.php` via env) and the Vite dev server proxy:
 
-- app: `localhost:5174`
-- portal: `localhost:5175`
+- dev: `localhost:5174`
+- prod: `https://crewli.app`
 
-**Production (`crewli.app`):** API `https://api.crewli.app`, SPAs `https://crewli.app`, `https://portal.crewli.app` — see `api/.env.example` for `FRONTEND_*` and `SANCTUM_STATEFUL_DOMAINS`. **`crewli.nl`** is only for a future marketing site; this application stack uses **`crewli.app`** (not `.nl` for API, SPAs, or transactional mail).
+See `api/.env.example` for `FRONTEND_*` and `SANCTUM_STATEFUL_DOMAINS`. **`crewli.nl`** is only for a future marketing site; this application stack uses **`crewli.app`** (not `.nl` for API, SPA, or transactional mail).
 
 ## Backend rules (strict)