Sub-market workbook import as a backend module tab

- Extract the complete import logic (label-scan reading, page
  find-or-create, slot filling, content-idempotent image attach) from
  ImportSubmarketWorkbooksCommand into the shared service
  SubmarketWorkbookImporter; the CLI command and the new controller are
  thin shells around importFile(), so both entry points cannot drift.
  CLI regression verified: identical dry-run report for the reference
  workbook (12 elements, page 443)
- New "Sub-Markets" tab in the VITEC Import module
  (SubmarketImportController + Import/Submarkets.html): upload multiple
  filled workbooks into the SAME inbox the CLI uses
  (migrations/submarkets_xlsx_in/), per-file checkboxes, dry-run and
  apply buttons, result cards with the familiar report and a direct
  link into the page module; backend dry-run verified against the CLI
- Submitted filenames are whitelisted against the actual directory
  listing (no path traversal); uploads restricted to sanitized .xlsx
  basenames
- Routes submarkets/submarket_upload/submarket_process in Modules.php,
  Sub-Markets tab link in the sibling module views, ok/danger badge
  colors in backend-import.css
- Docs section 5y (incl. operations note: apply in small batches in the
  module, mass runs via CLI - image downloads run inside the web
  request)

packages/vitec/Resources/Public/Css/backend-import.css

@@ -95,6 +95,14 @@
     background-color: #313131;
     color: #ffffff;
 }
+.vitec-administration .vitec-badge-ok {
+    background-color: #2f9e44;
+    color: #ffffff;
+}
+.vitec-administration .vitec-badge-danger {
+    background-color: #c0392b;
+    color: #ffffff;
+}
 
 /* --- form focus (frontend uses a 3px orange outline) ---------------- */