chore(deno): migrate toolchain from Node 24 + pnpm to Deno 2.9.7 + TypeScript 7.0.2 (W1.5)

- root deno.json workspace (nodeModulesDir auto), npm versions registered once in imports, deno.lock;
  remove pnpm-lock/pnpm-workspace/root package.json; members keep minimal package.json (name/type/exports)
- tasks: dev, typecheck (tsc 7.0.2 per member + deno check), lint/fmt (biome, useImportExtensions),
  test (vitest via deno), check:tokens, build (web + deno compile), ci, db:migrate/reset, gen:types
- tsconfig base moved to config/ (no root tsconfig.json); deno types -> types/deno.d.ts; web drops baseUrl
- server: Deno.serve entry with graceful shutdown, --role migrate|preflight|probe, WEB_ROOT static SPA hosting;
  drop @hono/node-server, tsx, esbuild build.mjs
- logger: redact child() bindings and serialize err by message/stack; sync stdout destination; tests
- relative imports get explicit extensions (sites/mp-sync paths left for follow-up)
- crash-recovery tests spawn `deno run -A`; tasks tests use unique per-file schemas
- single-container Dockerfile + entrypoint (migrate -> preflight -> api+worker watchdog), docker-compose.yml
- docs: README, runbook, ADR-001 superseded, plan §1 validation row

Co-Authored-By: Claude Fable 5.1 <[email protected]>

packages/contracts/src/api.ts

@@ -1,17 +1,17 @@
 import { z } from "zod";
-import * as agent from "./agent";
-import * as assets from "./assets";
-import { CapabilityDescriptor, KnownCapabilityId } from "./capability";
-import { type ApiScope, CursorQuery, cursorPage, Id, IdParam } from "./common";
-import * as content from "./content";
-import * as execution from "./execution";
-import * as identity from "./identity";
-import * as instances from "./instances";
-import * as ops from "./ops";
-import * as organization from "./organization";
-import * as policy from "./policy";
-import { GlobalSettings, GlobalSettingsUpdate } from "./settings";
-import * as sources from "./sources";
+import * as agent from "./agent.ts";
+import * as assets from "./assets.ts";
+import { CapabilityDescriptor, KnownCapabilityId } from "./capability.ts";
+import { type ApiScope, CursorQuery, cursorPage, Id, IdParam } from "./common.ts";
+import * as content from "./content.ts";
+import * as execution from "./execution.ts";
+import * as identity from "./identity.ts";
+import * as instances from "./instances.ts";
+import * as ops from "./ops.ts";
+import * as organization from "./organization.ts";
+import * as policy from "./policy.ts";
+import { GlobalSettings, GlobalSettingsUpdate } from "./settings.ts";
+import * as sources from "./sources.ts";
 
 // 所有 REST 端点的路径常量与请求/响应 schema 汇总。
 // path 相对 API_PREFIX,参数用 OpenAPI 风格 `{id}`(server 的 createRoute 直接使用);