feat: menú Ads + Social; Drive por defecto en activos

Renombra Ad Tracker a Ads, añade módulo Social (perfiles RRSS)
y abre Biblioteca en pestaña Drive. Aclara histórico GSC en Orgánico.

Co-authored-by: Cursor <cursoragent@cursor.com>

src/app/api/social/route.ts

@@ -0,0 +1,51 @@
+import { NextResponse } from 'next/server';
+import { createClient } from '@/lib/supabase/server';
+import { resolveActiveTenant, restGet } from '@/lib/tenant-context';
+import { isAgencyRole, userRole } from '@/lib/agency';
+
+export const dynamic = 'force-dynamic';
+
+/** GET — social channel integrations for active tenant. */
+export async function GET() {
+  const supabase = await createClient();
+  const {
+    data: { user },
+  } = await supabase.auth.getUser();
+  if (!user) {
+    return NextResponse.json({ error: 'Unauthorized' }, { status: 401 });
+  }
+
+  const ctx = await resolveActiveTenant(user);
+  if (!ctx.tenantId || ctx.portfolioWide) {
+    return NextResponse.json({
+      integrations: [],
+      warning: 'Selecciona un cliente en Contexto',
+    });
+  }
+
+  const agency = isAgencyRole(userRole(user));
+  const providers = 'instagram,facebook,tiktok,linkedin';
+
+  if (agency && ctx.viaView) {
+    const tid = encodeURIComponent(ctx.tenantId);
+    const r = await restGet(
+      `/rest/v1/integrations?tenant_id=eq.${tid}&provider=in.(${providers})&select=provider,status,external_account_id,label,last_sync_at,meta,error_message`
+    );
+    return NextResponse.json({
+      integrations: r.data || [],
+      warning: r.error || null,
+    });
+  }
+
+  const { data, error } = await supabase
+    .from('integrations')
+    .select(
+      'provider,status,external_account_id,label,last_sync_at,meta,error_message'
+    )
+    .in('provider', ['instagram', 'facebook', 'tiktok', 'linkedin']);
+
+  return NextResponse.json({
+    integrations: data || [],
+    warning: error?.message || null,
+  });
+}