chore: initial monorepo scaffold + WDS Phase 1+2 artifacts

- Nx 22.7 monorepo (pnpm 11.1, TypeScript 5.9, Node 24)
- apps/api: NestJS 11 (CJS conforme CODING-RULES.md PGD-DB-004)
- apps/web: React 19 + Vite 8 (ESM)
- libs/shared/api-interface: Zod contract base
- Docker Compose dev: Postgres 18, Valkey 8, MinIO, Mailpit
- WDS artifacts:
  - design-artifacts/A-Product-Brief/ (5 docs canônicos + 16 dialogs)
  - design-artifacts/B-Trigger-Map/ (hub + 4 personas + feature impact)
- Stack canon: STACK.md v2.2 + CODING-RULES.md v2.0 + brand.md
- AGENTS.md + README.md como entrada para devs/agentes

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>

scripts/postgres-init/01-create-dev-workspace.sql

@@ -0,0 +1,16 @@
+-- SAR dev bootstrap
+-- Cria o BD do workspace de exemplo para desenvolvimento local.
+-- Multi-tenancy real (BD-por-workspace) vem com master-login na próxima sessão.
+
+CREATE DATABASE sar_workspace_dev OWNER sar;
+GRANT ALL PRIVILEGES ON DATABASE sar_workspace_dev TO sar;
+
+-- Habilita pgcrypto (PII encryption — STACK.md §22)
+\c sar_workspace_dev
+CREATE EXTENSION IF NOT EXISTS pgcrypto;
+CREATE EXTENSION IF NOT EXISTS "uuid-ossp";
+
+-- Cria role app_reader (que será usada para conexão runtime — não admin)
+-- Padrão ADR 0006: app cliente conecta como app_reader, senha vem do master-login
+\c sar_master
+CREATE EXTENSION IF NOT EXISTS pgcrypto;