style(13-03): apply Prettier formatting across repo

Mechanical reformat — no logic changes. 398 files changed, 19125
insertions(+), 16457 deletions(-). Prettier 3.8.4 with .prettierrc
(singleQuote:true, semi:true, tabWidth:2, trailingComma:all,
printWidth:100). Isolated per D-13-08 for reviewability.

.planning/milestones/v1.0-phases/01-foundation-broker-spike/01-01-SUMMARY.md

@@ -148,6 +148,7 @@ None — plan executed exactly as specified. One minor pnpm API difference (allo
 ### Auto-fixed Issues
 
 **1. [Rule 3 - Blocking] pnpm 11 allowBuilds syntax**
+
 - **Found during:** Task 1 (pnpm install)
 - **Issue:** `pnpm install` failed with `ERR_PNPM_IGNORED_BUILDS: esbuild@*`. pnpm 11 uses `allowBuilds` map (not `onlyBuiltDependencies` list used in older versions)
 - **Fix:** Set `allowBuilds.esbuild: true` in pnpm-workspace.yaml
@@ -156,6 +157,7 @@ None — plan executed exactly as specified. One minor pnpm API difference (allo
 - **Committed in:** `3f59156` (Task 1 commit)
 
 **2. [Rule 1 - Bug] vi.mock hoisting in health test**
+
 - **Found during:** Task 2 (writing TDD RED test)
 - **Issue:** Placing `vi.mock()` inside `describe()` blocks caused Vitest hoisting warnings; tests used `resetModules` approach which conflicted with hoisting behavior
 - **Fix:** Moved `vi.mock` to module top level; used `vi.mocked().mockRejectedValueOnce()` for per-test override
@@ -164,6 +166,7 @@ None — plan executed exactly as specified. One minor pnpm API difference (allo
 - **Committed in:** `96cda58` (Task 2 feat commit)
 
 **3. [Checkpoint clearing - Blocking] Docker image build broken for pnpm workspace**
+
 - **Found during:** Task 3 (orchestrator bringing up the stack to clear the checkpoint)
 - **Issue:** The original `apps/api/Dockerfile` built from a `./apps/api` context and could not work in a pnpm workspace:
   1. `COPY package.json pnpm-lock.yaml* ./` + `pnpm install --frozen-lockfile` failed (`ERR_PNPM_NO_LOCKFILE`) — the lockfile lives at the repo root, not in `apps/api/`.
@@ -200,6 +203,7 @@ None. The `serveStatic` warning for `./public` in tests is expected (no built PW
 ## Threat Surface Scan
 
 No new threat surface beyond what was planned in the threat model:
+
 - T-01-01: `.env` excluded from git via `.gitignore` ✓
 - T-01-02: `familysync` user (not root) in docker-compose.yml ✓
 - T-01-03: `/health` unauthenticated, returns only `{ok, db}` ✓
@@ -221,5 +225,6 @@ No new threat surface beyond what was planned in the threat model:
 - Commits 3f59156, f31711a, 96cda58: FOUND
 
 ---
-*Phase: 01-foundation-broker-spike*
-*Completed: 2026-06-04 (Tasks 1-2; Task 3 at checkpoint)*
+
+_Phase: 01-foundation-broker-spike_
+_Completed: 2026-06-04 (Tasks 1-2; Task 3 at checkpoint)_