feat: web push notifications, mobile-ready (PRD §5.6)

ADR 0003: VAPID self-hosted today, DeviceToken model agnostic to
platform so iOS/Android (Expo/APNs/FCM) plug in as new senders later.

Backend (apps/api/src/modules/notifications)
- sender.ts: NotificationSender interface, WebPushSender via VAPID
- notifications.routes.ts: GET /me/notifications/config, POST/DELETE
  /me/device-tokens, PATCH /me/notifications/settings, POST /me/notifications/test
- scheduler.ts: node-cron Mon 09:00 Europe/Rome for weekly weigh-in
  reminder; auto-cleanup of expired tokens on 404/410
- env: VAPID_PUBLIC_KEY/PRIVATE_KEY/SUBJECT (all optional → push gracefully off)

Frontend
- public/sw.js minimal (push + notificationclick)
- lib/notifications/push-client.ts: subscribe / unsubscribe / getCurrentSubscription
- profile/notifications-{actions,panel}.tsx: editorial panel with toggles,
  device list, "send test", per-device removal
- pushReady requires both permission AND active subscription (covers the
  case where the user revoked the SW but kept the browser permission)

Schema
- DeviceToken { userId, platform, endpoint, p256dh, auth, token, userAgent,
  createdAt, lastSeenAt } with unique(userId, endpoint)
- ExtendedPrismaClient type exported from @ketopath/db
- NotificationSettings zod schema in @ketopath/shared

Tooling
- lint-staged: split .js out of eslint glob so service worker is only
  formatted (it lives outside the TS project)

i18n
- Notifications namespace (it) with typed error keys

Smoke tested: POST /me/device-tokens 201, POST /me/notifications/test 200,
real push delivered to a macOS Chrome device.

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>

packages/db/src/client.ts

@@ -17,3 +17,7 @@ if (process.env.NODE_ENV !== 'production') {
 }
 
 export const prisma = baseClient.$extends(fieldEncryptionExtension());
+
+// Tipo del client esteso (post-$extends), utile per chi consuma `app.prisma`
+// fuori dai route handler (es. scheduler).
+export type ExtendedPrismaClient = typeof prisma;

packages/db/src/index.ts

@@ -1,4 +1,5 @@
 export { prisma } from './client.js';
+export type { ExtendedPrismaClient } from './client.js';
 export {
   ActivityLevel,
   CookingTime,
@@ -14,11 +15,13 @@ export {
 } from '@prisma/client';
 export type {
   Account,
+  DeviceToken,
   FastEvent,
   Ingredient,
   MealPlan,
   MealSlot,
   Preferences,
+  PrismaClient,
   Profile,
   Recipe,
   RecipeIngredient,