feat(apollo-vertex): add customize appearance — form component and theme enforcer hook

[petervachon]

Summary

• Adds CustomizeAppearance.tsx — settings form with app title, logo upload/clear, and oklch color pickers for primary and accent colors. Reads/writes through BrandingAdapter so persistence is swappable. Toasts on save/reset via Sonner
• Adds use-branding-theme-enforcer.ts — hook that locks the app to light mode when a custom theme is active (brand colors are calibrated for light-mode lightness values) and restores the user's previous theme on revert

Stacked on #678 — merge that first.

Test plan

• Change app title, logo, and colors — confirm live preview updates across the shell
• Save changes — confirm toast fires and store persists
• Reset to defaults — confirm previous values restored
• Switch to custom theme — confirm app locks to light mode; revert — confirm previous theme restored

🤖 Generated with Claude Code

[github-actions]

The latest updates on your projects. Learn more about Vercel for GitHub.

Project	Deployment	Review	Updated (PT)
apollo-design	❌ Failed: @UiPath:registry=https://npm.pkg.github.com //npm.pkg.github.com/:_authToken=[hidden]...	N/A, Logs	Jun 08, 2026, 06:42:45 AM
apollo-docs	🟢 Ready	Preview, Logs	Jun 08, 2026, 06:43:32 AM
apollo-landing	❌ Failed: @UiPath:registry=https://npm.pkg.github.com //npm.pkg.github.com/:_authToken=[hidden]...	N/A, Logs	Jun 08, 2026, 06:42:45 AM
apollo-ui-react	❌ Failed: @UiPath:registry=https://npm.pkg.github.com //npm.pkg.github.com/:_authToken=[hidden]...	N/A, Logs	Jun 08, 2026, 06:42:45 AM
apollo-vertex	❌ Failed: @UiPath:registry=https://npm.pkg.github.com //npm.pkg.github.com/:_authToken=[hidden]...	N/A, Logs	Jun 08, 2026, 06:42:48 AM

[github-actions]

Dependency License Review

• ✅ 2105 package(s) scanned
• ✅ No license issues found
• ⚠️ 15 package(s) excluded (see details below)

License distribution

License	Packages
MIT	1826
ISC	104
Apache-2.0	69
BSD-3-Clause	30
BSD-2-Clause	24
Copyright 2022, UiPath, all rights reserved	9
BlueOak-1.0.0	8
MPL-2.0	5
MIT OR Apache-2.0	3
MIT-0	3
Unknown	3
Unlicense	3
CC0-1.0	3
LGPL-3.0-or-later	2
(MIT OR Apache-2.0)	2
Python-2.0	1
CC-BY-4.0	1
(MPL-2.0 OR Apache-2.0)	1
BSD	1
Artistic-2.0	1
(WTFPL OR MIT)	1
(BSD-2-Clause OR MIT OR Apache-2.0)	1
CC-BY-3.0	1
0BSD	1
(MIT OR CC0-1.0)	1
MIT AND ISC	1

Excluded packages

Package	Version	License	Reason
@img/sharp-libvips-linux-x64	1.2.4	LGPL-3.0-or-later	LGPL pre-built binary, not linked
@img/sharp-libvips-linuxmusl-x64	1.2.4	LGPL-3.0-or-later	LGPL pre-built binary, not linked
@uipath/apollo-angular-elements	5.89.0	Copyright 2022, UiPath, all rights reserved	UiPath first-party package
@uipath/apollo-core	4.35.0, 4.35.1, 4.35.2	Copyright 2022, UiPath, all rights reserved	UiPath first-party package
@uipath/apollo-fonts	1.25.8	Copyright 2022, UiPath, all rights reserved	UiPath first-party package
@uipath/apollo-icons	1.33.7	Copyright 2022, UiPath, all rights reserved	UiPath first-party package
@uipath/apollo-mui5	2.31.26, 2.31.27	Copyright 2022, UiPath, all rights reserved	UiPath first-party package
@uipath/portal-shell	3.351.4	Copyright 2022, UiPath, all rights reserved	UiPath first-party package
@uipath/portal-shell-react	3.149.36	Copyright 2022, UiPath, all rights reserved	UiPath first-party package
@uipath/portal-shell-types	3.326.0	Copyright 2022, UiPath, all rights reserved	UiPath first-party package
@uipath/portal-shell-util	1.114.0	Copyright 2022, UiPath, all rights reserved	UiPath first-party package
@uipath/apollo-lab	25.12.0	Unknown	UiPath first-party package
@uipath/telemetry-client-web	5.1.0	Unknown	UiPath first-party package
khroma	2.1.0	Unknown	MIT per GitHub repo, missing license field in package.json
hyperx	2.5.4	BSD	BSD-2-Clause per LICENSE file, non-SPDX "BSD" in package.json

[github-actions]

This PR has been stale for over 2 weeks with no new commits. Closing — feel free to reopen if you'd like to continue this work. To keep a PR exempt from this automation, add the do-not-close label.

[github-actions]

This PR has been stale for over 2 weeks with no new commits. Closing — feel free to reopen if you'd like to continue this work. To keep a PR exempt from this automation, add the do-not-close label.