`GET /api/modules/manifest` — returns active modules with their `ui` declarations (pages, nav items, widgets, permissions). Depends on Phase 3 complete.