Add Odoo website bootstrap support

[cbusillo]

Summary

• load tenant-owned website-bootstrap.toml during runtime selection and merge declared website modules into ODOO_INSTALL_MODULES
• encode canonical URL, homepage/page or controller route, and logo intent into the existing typed Odoo payload
• apply website bootstrap state idempotently from data workflows and startup, while preserving launchplane.settings fail-closed behavior for config/addon overrides
• document the tenant-owned website bootstrap contract and add focused tests

Refs #34

Validation

• uv run python -m unittest tests.test_runtime.RuntimeCommandTests.test_typed_odoo_instance_override_payload_includes_website_bootstrap tests.test_runtime.RuntimeCommandTests.test_data_workflow_script_environment_keeps_typed_payload tests.test_runtime.RuntimeCommandTests.test_native_runtime_select_includes_website_bootstrap_payload tests.test_docker_script_override_guards.DockerScriptOverrideGuardTests
• uv run ruff check --diff odoo_devkit/local_runtime.py docker/scripts/run_odoo_data_workflows.py docker/scripts/run_odoo_startup.py tests/test_runtime.py tests/test_docker_script_override_guards.py
• uv run ruff check odoo_devkit/local_runtime.py docker/scripts/run_odoo_data_workflows.py docker/scripts/run_odoo_startup.py tests/test_runtime.py tests/test_docker_script_override_guards.py
• uv run python -m unittest discover -s tests
• uv run ruff format --check .
• uv run ruff check .
• uv run python -m py_compile docker/scripts/run_odoo_data_workflows.py docker/scripts/run_odoo_startup.py odoo_devkit/local_runtime.py
• uv build

[cbusillo]

Pre-merge self-review notes:

• Fixing here: extract/centralize the duplicated website bootstrap apply logic currently embedded in both data workflow and startup scripts before merge.
• Keeping as validation notes, not new issues: controller-route verification is offline/module-level in devkit and the public route proof remains the Launchplane live verification step; canonical/domain handling should be proven by the same CM testing run.
• Follow-up only if needed: is carried in the typed payload but not applied because there is no generic Odoo website field for it in this path.

Issue #34 and Launchplane blockers #542/#520 have been updated to reflect this state.

[cbusillo]

Correction to the self-review note above: logo_alt is carried in the typed payload but not applied because there is no generic Odoo website field for it in this path.