Fix sub-app permissions bug, add Comments app, support Site Editor

- Root-cause fix for "Sorry, you are not allowed to access this page" on
  Menu Creator/Activity Log/Role Editor: remove_submenu_page() was
  corrupting WP core's user_can_access_admin_page() capability lookup.
  Sub-apps now stay registered in $submenu; MenuSerializer filters them
  out of the sidebar instead.
- Add a 6th sub-app, Comments, with a redirect from native edit-comments.php.
- Extend the window-chrome/taskbar framing to the Site Editor
  (site-editor.php), including a fix for a CSS position:fixed
  over-constraint bug that let its frame run past the viewport.
- Rewrite the taskbar from a single sessionStorage slot to a list so
  multiple minimized windows are each independently restorable.
- Extend native-dark.css coverage to the block editor's own chrome.

Co-Authored-By: Claude Sonnet 5 <[email protected]>

admin/src/Shell/MenuSerializer.php

@@ -78,6 +78,16 @@ class MenuSerializer
           $sub_title = self::clean_title(isset($sub[0]) ? $sub[0] : "");
           $sub_slug = isset($sub[2]) ? $sub[2] : "";
 
+          // Aurora's own sub-apps (Menu Creator, Comments, etc.) are
+          // presented in the sidebar's dedicated Aurora nav section
+          // instead — skip them here so they aren't duplicated. Most are
+          // parented under "aurora-admin" itself, already skipped above
+          // wholesale, but "aurora-admin-plugins" is parented under the
+          // real "plugins.php" menu and needs this explicit check.
+          if (strpos($sub_slug, "aurora-admin-") === 0) {
+            continue;
+          }
+
           $entry["submenu"][] = [
             "id" => $sub_slug,
             "title" => $sub_title["title"],
@@ -136,6 +146,10 @@ class MenuSerializer
       return admin_url("plugins.php?page=aurora-admin-plugins");
     }
 
+    if ($slug === "edit-comments.php") {
+      return admin_url("admin.php?page=aurora-admin-comments");
+    }
+
     // Already an absolute URL.
     if (preg_match('#^https?://#', $slug)) {
       return $slug;