chore(deno): migrate toolchain from Node 24 + pnpm to Deno 2.9.7 + TypeScript 7.0.2 (W1.5)

- root deno.json workspace (nodeModulesDir auto), npm versions registered once in imports, deno.lock;
  remove pnpm-lock/pnpm-workspace/root package.json; members keep minimal package.json (name/type/exports)
- tasks: dev, typecheck (tsc 7.0.2 per member + deno check), lint/fmt (biome, useImportExtensions),
  test (vitest via deno), check:tokens, build (web + deno compile), ci, db:migrate/reset, gen:types
- tsconfig base moved to config/ (no root tsconfig.json); deno types -> types/deno.d.ts; web drops baseUrl
- server: Deno.serve entry with graceful shutdown, --role migrate|preflight|probe, WEB_ROOT static SPA hosting;
  drop @hono/node-server, tsx, esbuild build.mjs
- logger: redact child() bindings and serialize err by message/stack; sync stdout destination; tests
- relative imports get explicit extensions (sites/mp-sync paths left for follow-up)
- crash-recovery tests spawn `deno run -A`; tasks tests use unique per-file schemas
- single-container Dockerfile + entrypoint (migrate -> preflight -> api+worker watchdog), docker-compose.yml
- docs: README, runbook, ADR-001 superseded, plan §1 validation row

Co-Authored-By: Claude Fable 5.1 <[email protected]>

packages/domain/src/path/binding.ts

@@ -1,5 +1,5 @@
-import { sanitizeFileName, sanitizeSegment } from "./sanitize";
-import { compileTemplate, type NamingContext, renderTemplate, type TemplateVar } from "./template";
+import { sanitizeFileName, sanitizeSegment } from "./sanitize.ts";
+import { compileTemplate, type NamingContext, renderTemplate, type TemplateVar } from "./template.ts";
 
 export interface LibraryRoot {
   id: string;

packages/domain/src/path/index.ts

@@ -10,10 +10,10 @@ export {
   resolveTargetDirectory,
   type TargetDirectoryDecision,
   validateTemplateSet,
-} from "./binding";
-export { detectPathConflicts, type ExistingPath, type PathConflict, type PlannedPath } from "./conflicts";
-export { type MapResult, type PathMapping, toDownloaderPath, toHostPath, validatePathMappings } from "./mapping";
-export { sanitizeFileName, sanitizeSegment, utf8Length } from "./sanitize";
+} from "./binding.ts";
+export { detectPathConflicts, type ExistingPath, type PathConflict, type PlannedPath } from "./conflicts.ts";
+export { type MapResult, type PathMapping, toDownloaderPath, toHostPath, validatePathMappings } from "./mapping.ts";
+export { sanitizeFileName, sanitizeSegment, utf8Length } from "./sanitize.ts";
 export {
   buildNamingContext,
   type CompiledTemplate,
@@ -24,4 +24,4 @@ export {
   TEMPLATE_VARS,
   TemplateError,
   type TemplateVar,
-} from "./template";
+} from "./template.ts";

packages/domain/src/path/template.ts

@@ -1,5 +1,5 @@
-import type { ParsedRelease } from "../release-parser/types";
-import { sanitizeSegment } from "./sanitize";
+import type { ParsedRelease } from "../release-parser/types.ts";
+import { sanitizeSegment } from "./sanitize.ts";
 
 /** 受限模板(白名单变量 + 可选片段),不用 Jinja/任意表达式 */
 export const TEMPLATE_VARS = [