style(13-03): apply Prettier formatting across repo

Mechanical reformat — no logic changes. 398 files changed, 19125
insertions(+), 16457 deletions(-). Prettier 3.8.4 with .prettierrc
(singleQuote:true, semi:true, tabWidth:2, trailingComma:all,
printWidth:100). Isolated per D-13-08 for reviewability.

.planning/research/SUMMARY.md

@@ -20,6 +20,7 @@ Three preservation rules are non-negotiable and drive the design: VALARM authori
 No stack change. One new dev dependency; everything else reuses v1.0.
 
 **Core additions:**
+
 - **`@playwright/test`** (dev, `apps/pwa`): the global `playwright-cli` binary is interactive tooling and exposes no `storageState`/`devices` presets — `@playwright/test` is required for CI spec files doing authenticated, device-emulated runs. The two coexist. Auth via the existing `DEV_AUTH_BYPASS` avoids mocking Authelia.
 - **Gitea Actions workflows** (`.gitea/workflows/*.yml`, no npm packages): GitHub-Actions-compatible syntax but `runs-on: self-hosted`; job image `catthehacker/ubuntu:act-latest`; MariaDB service container `mariadb:11` with `healthcheck.sh --connect --innodb_initialized` (NOT `mysqladmin ping` — removed in MariaDB 11); Docker push via `docker/login-action@v3` + `docker/build-push-action@v5` needs a Gitea PAT with `write:package` scope (no built-in token has registry push rights).
 - **Setup wizard validation — zero new deps:** env presence via `zod.safeParse`, DB via `mysql2` connect, VAPID via `Buffer.from(key,'base64url').length === 32`, OIDC via native `fetch('/.well-known/openid-configuration')`.
@@ -27,12 +28,14 @@ No stack change. One new dev dependency; everything else reuses v1.0.
 ### Expected Features
 
 **Must have (table stakes):**
+
 - Per-event reminder selector with preset offsets (None / 5m / 10m / 15m / 30m / 1h / 2h / 1d / 2d); **"None" is the default** (no VALARM, no push). All-day events fire at 9 AM on the alert day (Apple convention). Existing VALARMs round-trip — never silently stripped.
 - Admin Settings scoped to exactly two tasks: rotate/re-enter a member's app password (with inline CalDAV test) and toggle `calendars.is_shared`. Single `users.is_admin` boolean gate.
 - Setup wizard: validated first-run steps (DB, app URL, OIDC, session secret auto-gen, encryption key auto-gen, VAPID auto-gen + structural check, admin account, Fastmail app password CalDAV PROPFIND test). Inline per-field validation; Next disabled until step passes.
 - Faster write-back: target < 2s perceived; trigger an immediate drain on enqueue, keep the interval as fallback.
 
 **Should have (competitive / differentiator):**
+
 - Gitea CI PR gate + on-merge Docker publish.
 - Mobile Playwright harness (`devices['iPhone 15']`, stored auth via `DEV_AUTH_BYPASS`).
 - Multiple alarms per event (2× VALARM) — stretch, defer to v1.2.
@@ -44,6 +47,7 @@ No stack change. One new dev dependency; everything else reuses v1.0.
 Findings grounded in the actual v1.0 codebase. Integration points (real paths):
 
 **Major components:**
+
 1. **DB migration** — `users.is_admin BOOLEAN DEFAULT 0`, `calendar_events.reminder_lead_minutes INT NULL`, an `app_config`/setup-state table. Foundation; blocks the role-gated and reminder work. (generate+migrate, never `push`.)
 2. **Event-driven drain** — in-process `EventEmitter` (`lib/outboxTrigger.ts`, mirroring existing `listEmitter.ts`); signal after `db.insert(calendarOutbox)` in the three write handlers in `routes/events.ts`; subscribe in `startOutboxWorker()`. The existing `isDraining` guard already covers concurrent invocations. **Redis pub/sub is wrong here** — the drain is single-process by design.
 3. **VALARM write path** — `buildVeventString` in `broker/vevent.ts` gains a `reminderMinutes?` param using `ICAL.Component('valarm')` + `ICAL.Duration.fromSeconds` (same ical.js surface as RRULE). `eventFieldsSchema` (routes/events.ts) and `outboxPayloadSchema` (outboxWorker.ts) must change in sync (flagged by the IN-03 comment).
@@ -92,10 +96,10 @@ Tracks 7 and 8 have no code dependencies and can run parallel to anything.
 
 ## Confidence
 
-| Domain | Confidence | Notes |
-|--------|------------|-------|
-| Stack | HIGH | v1.0 proven; one dev dep; Gitea syntax compatible (MariaDB 11 healthcheck caveat noted) |
-| Features | HIGH | All have prior art; scoped to a tiny household |
-| Architecture | HIGH | Grounded in real v1.0 source; component boundaries + build order sound |
-| Pitfalls | HIGH | 15 pitfalls from codebase review + RFC 5545 + v1.0 retrospective, each mapped to a phase |
-| Unraid CI runner | MEDIUM | Runner Docker-socket/Node/pnpm state unknown until probed |
+| Domain           | Confidence | Notes                                                                                    |
+| ---------------- | ---------- | ---------------------------------------------------------------------------------------- |
+| Stack            | HIGH       | v1.0 proven; one dev dep; Gitea syntax compatible (MariaDB 11 healthcheck caveat noted)  |
+| Features         | HIGH       | All have prior art; scoped to a tiny household                                           |
+| Architecture     | HIGH       | Grounded in real v1.0 source; component boundaries + build order sound                   |
+| Pitfalls         | HIGH       | 15 pitfalls from codebase review + RFC 5545 + v1.0 retrospective, each mapped to a phase |
+| Unraid CI runner | MEDIUM     | Runner Docker-socket/Node/pnpm state unknown until probed                                |