Sync current sources: clean RAP handover names, app rebind, tooling

Working-tree state as of 2026-09-29, uncommitted since the initial
"upload current sources" commit:

- docs/handover/rap/: renamed the 11 generator-suffixed sources
  (zz*000) to the clean object names built on the tenant, plus the
  A2X leg and parameter-entity edits.
- app/: manifest, annotations, i18n, mock data and local/mock ui5
  configs updated to the live service shape.
- PRD.md, CHANGELOG.md, KNOWLEDGE.md: build record through
  2026-09-19, including the rejected reentrance-ticket path.
- tools/adt-reentrance-login/: retained login helper (new).
- docs/v2/zui_arena_change_appr_o4.metadata.xml: captured live
  $metadata (new).
- Dropped a stray 0.3GB-class Eclipse installer that the initial
  commit had tracked under a URL-mangled filename, and the
  machine-specific 0M7DEJI.code-workspace.

Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>

docs/handover/rap/zr_changeapproval.dcls.asdcls

@@ -0,0 +1,13 @@
+/* TARGET OBJECT : access control ZR_CHANGEAPPROVAL - README step U10, UI leg
+   abap: URI     : abap:/repotree-v1/0M7DEJI/System%20Library/ZLOCAL/ZARENA_PLM/Core%20Data%20Services/Access%20Controls/ZR_CHANGEAPPROVAL/zr_changeapproval.dcls.acds
+   ACTION        : create empty via ADT MCP (objectType DCLS/DL, README U10), replace entire content, save, then activate
+                   (view ZR_CHANGEAPPROVAL must be active).
+   Full access rule: read access is governed by the IAM app / business catalog (ADR-002); SAP delivers no full-access
+   roles but customers may use them [source: abap-docs /abap-docs-cloud/ABENCDS_DCL_ROLE_GRANT_RULE, verified 2026-09-15].
+   @MappingRole: true assigns the role to every user [source: abap-docs /abap-platform-rap-opensap/week2/unit7, verified 2026-09-15].
+   Tighten later with a custom authorization object + pfcg_auth condition if per-user data restrictions are needed. */
+@EndUserText.label: 'Access control for ZR_CHANGEAPPROVAL'
+@MappingRole: true
+define role ZR_CHANGEAPPROVAL {
+  grant select on ZR_CHANGEAPPROVAL;
+}