feat(pam): add status, target system and collection filters to managed credentials

[maxkpower]

Design review 2026-09-04, with a mockup: a width-capped search plus filter chips, same concept as the other PAM pages.

The existing tw-max-w-md on the search was inert: bit-search sets no host display class, so as a block child it is an inline box and max-width does not apply. Making the row a flex container is what activates the cap. Adds the rotation module's first Storybook stories.

[codecov]

Codecov Report

❌ Patch coverage is 96.66667% with 2 lines in your changes missing coverage. Please review.
✅ Project coverage is 56.06%. Comparing base (e7321e3) to head (0755723).
⚠️ Report is 288 commits behind head on pam/uat.
✅ All tests successful. No failed tests found.

Files with missing lines	Patch %	Lines
...ense/bit-web/src/app/pam/testing/story-fixtures.ts	0.00%	2 Missing ⚠️

Additional details and impacted files

@@             Coverage Diff             @@
##           pam/uat   #23004      +/-   ##
===========================================
+ Coverage    55.74%   56.06%   +0.32%     
===========================================
  Files         4438     4467      +29     
  Lines       141404   143101    +1697     
  Branches     22371    22603     +232     
===========================================
+ Hits         78824    80234    +1410     
- Misses       56914    57117     +203     
- Partials      5666     5750      +84     

☔ View full report in Codecov by Harness.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:

• 📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.