test(modules): integration tests for company surfaces and stub generator

End-to-end coverage for the new module APIs and the custom module:make
stubs shipped from invoiceshelf/modules. Each test file is hermetic — uses
\InvoiceShelf\Modules\Registry::flush() in setup/teardown to prevent
cross-test contamination, and ModuleMakeStubTest cleans up generated test
artifacts (the throwaway scaffold directory and the storage statuses entry).

- CompanyModulesIndexTest: 4 tests covering only-enabled-modules filter,
  has_settings flag computed against the real Registry, menu inclusion, and
  the empty-state response.

- ModuleSettingsControllerTest: 7 tests covering 404 for unregistered slug,
  show schema + defaults round-trip, persistence with the
  module.{slug}.{key} prefix, missing-required-field rejection, unknown-key
  silent-drop, update 404, and per-company isolation (the load-bearing
  multi-tenancy guarantee).

- BootstrapModuleMenuTest: 3 tests covering Registry-driven module_menu
  population on the company-context bootstrap branch, the empty default
  when nothing is registered, and the absence of module_menu on the
  super-admin-mode branch.

- ModuleMakeStubTest: 3 tests that actually run
  Artisan::call('module:make', ['name' => ['ScaffoldProbe']]) against a
  throwaway module name and assert the generated ServiceProvider contains
  use InvoiceShelf\Modules\Registry, the generated composer.json requires
  invoiceshelf/modules: ^3.0, and starter lang/en/{menu,settings}.php exist.
  Validates that the custom stubs shipped from the package are picked up
  via Stub::setBasePath().

tests/Feature/Company/Modules/BootstrapModuleMenuTest.php

@@ -0,0 +1,59 @@
+<?php
+
+use App\Models\User;
+use Illuminate\Support\Facades\Artisan;
+use InvoiceShelf\Modules\Registry;
+use Laravel\Sanctum\Sanctum;
+
+use function Pest\Laravel\getJson;
+
+beforeEach(function () {
+    Artisan::call('db:seed', ['--class' => 'DatabaseSeeder', '--force' => true]);
+    Artisan::call('db:seed', ['--class' => 'DemoSeeder', '--force' => true]);
+
+    $user = User::find(1);
+    $this->withHeaders([
+        'company' => $user->companies()->first()->id,
+    ]);
+    Sanctum::actingAs($user, ['*']);
+
+    Registry::flush();
+});
+
+afterEach(function () {
+    Registry::flush();
+});
+
+test('bootstrap returns module_menu populated from Registry', function () {
+    Registry::registerMenu('sales-tax-us', [
+        'title' => 'sales_tax_us::menu.title',
+        'link' => '/admin/modules/sales-tax-us/settings',
+        'icon' => 'CalculatorIcon',
+    ]);
+
+    $response = getJson('api/v1/bootstrap')->assertOk();
+
+    $response->assertJsonPath('module_menu.0.title', 'sales_tax_us::menu.title');
+    $response->assertJsonPath('module_menu.0.link', '/admin/modules/sales-tax-us/settings');
+    $response->assertJsonPath('module_menu.0.icon', 'CalculatorIcon');
+});
+
+test('bootstrap returns empty module_menu when nothing is registered', function () {
+    getJson('api/v1/bootstrap')
+        ->assertOk()
+        ->assertJsonPath('module_menu', []);
+});
+
+test('admin-mode bootstrap does not include module_menu', function () {
+    Registry::registerMenu('sales-tax-us', [
+        'title' => 'sales_tax_us::menu.title',
+        'link' => '/admin/modules/sales-tax-us/settings',
+        'icon' => 'CalculatorIcon',
+    ]);
+
+    $response = getJson('api/v1/bootstrap?admin_mode=1');
+
+    // Super-admin branch should not include the dynamic Modules sidebar group —
+    // that surface only exists in the company context.
+    $response->assertJsonMissingPath('module_menu');
+});