chore(deno): migrate toolchain from Node 24 + pnpm to Deno 2.9.7 + TypeScript 7.0.2 (W1.5)

- root deno.json workspace (nodeModulesDir auto), npm versions registered once in imports, deno.lock;
  remove pnpm-lock/pnpm-workspace/root package.json; members keep minimal package.json (name/type/exports)
- tasks: dev, typecheck (tsc 7.0.2 per member + deno check), lint/fmt (biome, useImportExtensions),
  test (vitest via deno), check:tokens, build (web + deno compile), ci, db:migrate/reset, gen:types
- tsconfig base moved to config/ (no root tsconfig.json); deno types -> types/deno.d.ts; web drops baseUrl
- server: Deno.serve entry with graceful shutdown, --role migrate|preflight|probe, WEB_ROOT static SPA hosting;
  drop @hono/node-server, tsx, esbuild build.mjs
- logger: redact child() bindings and serialize err by message/stack; sync stdout destination; tests
- relative imports get explicit extensions (sites/mp-sync paths left for follow-up)
- crash-recovery tests spawn `deno run -A`; tasks tests use unique per-file schemas
- single-container Dockerfile + entrypoint (migrate -> preflight -> api+worker watchdog), docker-compose.yml
- docs: README, runbook, ADR-001 superseded, plan §1 validation row

Co-Authored-By: Claude Fable 5.1 <[email protected]>

docker/entrypoint.sh

@@ -0,0 +1,37 @@
+#!/usr/bin/env bash
+# 容器入口:迁移 → 启动自检 → api 与 worker 两个进程互相看护。
+# 任一进程退出就停掉另一个并以非 0 退出,把"半死容器"变成整体退出,交给 restart 策略自愈。
+set -euo pipefail
+
+BIN=/app/umt-server
+
+"$BIN" --role migrate
+"$BIN" --role preflight
+
+"$BIN" --role api &
+api_pid=$!
+"$BIN" --role worker &
+worker_pid=$!
+
+stop_all() {
+  kill -TERM "$api_pid" "$worker_pid" 2>/dev/null || true
+  wait "$api_pid" "$worker_pid" 2>/dev/null || true
+}
+
+on_signal() {
+  echo "entrypoint: 收到 $1,停止 api 与 worker" >&2
+  stop_all
+  exit 0
+}
+trap 'on_signal SIGTERM' TERM
+trap 'on_signal SIGINT' INT
+
+set +e
+wait -n "$api_pid" "$worker_pid"
+code=$?
+set -e
+echo "entrypoint: 有进程退出(code=$code),停止其余进程" >&2
+stop_all
+# 常驻进程不应自行正常退出;按失败处理以触发重启
+if [ "$code" -eq 0 ]; then code=1; fi
+exit "$code"