Settings: connect this installation to a portal

A superuser-only tab that redeems a claim code and shows the link's state. It
names the account a remote session acts as, because that is the thing being
granted and the person granting it should see it spelled out.

Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01XtBzdDyLsmDaF1W7DLYtYM

frontend/src/client/schemas.gen.ts

@@ -634,6 +634,26 @@ these so a value never appears to come from nowhere — or worse, appears to
 come from whichever node happens to be drawn as a producer.`
 } as const;
 
+export const EnrollBodySchema = {
+    properties: {
+        portal_url: {
+            type: 'string',
+            maxLength: 255,
+            minLength: 1,
+            title: 'Portal Url'
+        },
+        claim_code: {
+            type: 'string',
+            maxLength: 32,
+            minLength: 1,
+            title: 'Claim Code'
+        }
+    },
+    type: 'object',
+    required: ['portal_url', 'claim_code'],
+    title: 'EnrollBody'
+} as const;
+
 export const EventRowSchema = {
     properties: {
         id: {