chore: upgrade dependencies (dependabot PRs #2 & #3) with breaking-change fixes

Production dependency upgrades:
- prisma + @prisma/client: 6 → 7 (major)
- zod: 3 → 4 (major)
- uuid: 11 → 13 (major)
- pino: 9 → 10 (major)
- @xterm/xterm: 5 → 6 (major)
- @tanstack/react-router: 1.114 → 1.162
- @types/recharts: 1 → 2
- lucide-react: 0.475 → 0.575
- xterm addons: minor bumps

Dev dependency upgrades:
- vite: 6 → 7 (major)
- @vitejs/plugin-react: 4 → 5 (major)
- @types/node: 22 → 25
- typescript: 5.7 → 5.9
- @tanstack/router-plugin: minor bump
- jsdom: 26 → 28

Breaking-change fixes:
- Prisma 7: move datasource URL out of schema.prisma into prisma.config.ts;
  add @prisma/adapter-pg + pg; update PrismaClient to use PrismaPg adapter
- Zod v4: z.record(v) → z.record(z.string(), v) in alerts.ts and logs.ts
- pnpm: approve @prisma/engines and prisma build scripts via onlyBuiltDependencies

Database migrations:
- Consolidate 9 incremental migrations (000–008) into single 20260224000000_init
- Heartbeat and Metric tables created with composite PK (id, timestamp) for
  TimescaleDB hypertable compatibility from the start

Makefile:
- Add deps-upgrade, deps-upgrade-interactive, deps-outdated targets

All 668 tests pass; full typecheck clean.

Co-Authored-By: Claude Sonnet 4.6 (1M context) <noreply@anthropic.com>

Author: pacphi

Makefile

@@ -4,6 +4,7 @@
 
 .PHONY: install build dev test test-coverage lint typecheck \
 	fmt fmt-check audit \
+	deps-upgrade deps-upgrade-interactive deps-outdated \
 	infra-up infra-down infra-reset infra-logs infra-status \
 	stack-build stack-up stack-down stack-nuke stack-logs stack-status stack-rebuild \
 	db-migrate db-migrate-deploy db-generate db-seed db-reset db-studio \
@@ -83,6 +84,24 @@ audit:
 	pnpm audit
 	@echo "$(GREEN)✓ Security audit complete$(RESET)"
 
+# ============================================================================
+# Dependency Management
+# ============================================================================
+
+deps-upgrade:
+	@echo "$(BLUE)Upgrading npm dependencies to latest...$(RESET)"
+	pnpm update --recursive --latest
+	@echo "$(GREEN)✓ npm dependencies upgraded$(RESET)"
+
+deps-upgrade-interactive:
+	@echo "$(BLUE)Interactive npm dependency upgrade...$(RESET)"
+	pnpm update --recursive --interactive
+
+deps-outdated:
+	@echo "$(BLUE)Checking for outdated npm dependencies...$(RESET)"
+	pnpm outdated --recursive
+	@echo "$(GREEN)✓ Outdated check complete$(RESET)"
+
 # ============================================================================
 # Infrastructure (postgres + redis only)
 # ============================================================================

apps/api/package.json

@@ -25,22 +25,25 @@
   },
   "dependencies": {
     "@hono/node-server": "^1.13.7",
-    "@prisma/client": "^6.3.1",
+    "@prisma/adapter-pg": "^7.4.1",
+    "@prisma/client": "^7.4.1",
     "hono": "^4.7.2",
+    "pg": "^8.16.3",
     "ioredis": "^5.4.2",
-    "pino": "^9.6.0",
+    "pino": "^10.3.1",
     "pino-pretty": "^13.0.0",
-    "prisma": "^6.3.1",
+    "prisma": "^7.4.1",
     "ws": "^8.18.1",
-    "zod": "^3.24.2",
-    "uuid": "^11.1.0"
+    "zod": "^4.3.6",
+    "uuid": "^13.0.0"
   },
   "devDependencies": {
-    "@types/node": "^22.13.4",
+    "@types/node": "^25.3.0",
+    "@types/pg": "^8.11.14",
     "@types/ws": "^8.5.14",
     "@types/uuid": "^10.0.0",
     "tsx": "^4.19.2",
-    "typescript": "^5.7.3",
+    "typescript": "^5.9.3",
     "vitest": "^4.0.0",
     "@vitest/coverage-v8": "^4.0.0"
   },

apps/api/prisma.config.ts

@@ -0,0 +1,12 @@
+import { defineConfig } from "prisma/config";
+
+export default defineConfig({
+  schema: "./prisma/schema.prisma",
+  // DATABASE_URL is only required for migrate/deploy/studio commands, not for generate.
+  ...(process.env.DATABASE_URL
+    ? { datasource: { url: process.env.DATABASE_URL } }
+    : {}),
+  migrations: {
+    path: "./prisma/migrations",
+  },
+});