feat(infra): script de provisionamento de workspace — C9

pnpm workspace:provision --id <id> [--name <nome>] [--with-seed]
Cria banco sar_workspace_{id}, habilita extensões, aplica todas as
migrations e opcionalmente popula dados demo. Sem master DB necessário
— JwtAuthGuard resolve a URL pela convenção de nome (ADR 0006).

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

package.json

@@ -17,6 +17,7 @@
     "e2e": "nx run-many -t e2e",
     "dev:api": "nx run api:serve",
     "dev:web": "nx run web:serve",
+    "workspace:provision": "tsx scripts/provision-workspace.ts",
     "dev:up": "docker compose -f docker-compose.dev.yml up -d",
     "dev:down": "docker compose -f docker-compose.dev.yml down",
     "dev:logs": "docker compose -f docker-compose.dev.yml logs -f",