style(13-03): apply Prettier formatting across repo

Mechanical reformat — no logic changes. 398 files changed, 19125
insertions(+), 16457 deletions(-). Prettier 3.8.4 with .prettierrc
(singleQuote:true, semi:true, tabWidth:2, trailingComma:all,
printWidth:100). Isolated per D-13-08 for reviewability.

apps/api/src/auth/devBypass.ts

@@ -24,8 +24,8 @@
  *   - This file must never be removed — the pattern is referenced by Plan 02 routes.
  */
 
-import type { MiddlewareHandler } from 'hono'
-import { COLOR_PALETTE } from './user.js'
+import type { MiddlewareHandler } from 'hono';
+import { COLOR_PALETTE } from './user.js';
 
 export const DEV_USER = {
   id: 1,
@@ -33,7 +33,7 @@ export const DEV_USER = {
   oidcSub: 'dev-user',
   displayName: 'Dev User',
   color: COLOR_PALETTE[0], // '#4A90D9' — first palette slot
-} as const
+} as const;
 
 /**
  * Extend Hono's ContextVariableMap so that c.get('user') / c.set('user', ...)
@@ -43,7 +43,7 @@ export const DEV_USER = {
  */
 declare module 'hono' {
   interface ContextVariableMap {
-    user: typeof DEV_USER
+    user: typeof DEV_USER;
   }
 }
 
@@ -59,18 +59,18 @@ export function devAuthBypass(): MiddlewareHandler {
   // Hard production guard — FIRST check, before reading any other env var.
   // Ensures this middleware can never grant access in production regardless of config.
   if (process.env.NODE_ENV === 'production') {
-    return async (_c, next) => next()
+    return async (_c, next) => next();
   }
 
   // Bypass flag not set — passthrough; OIDC auth proceeds normally.
   if (process.env.DEV_AUTH_BYPASS !== 'true') {
-    return async (_c, next) => next()
+    return async (_c, next) => next();
   }
 
   // Bypass active: inject fixed dev user into Hono context.
   // Routes that read c.get('user') will receive DEV_USER.
   return async (c, next) => {
-    c.set('user', DEV_USER)
-    await next()
-  }
+    c.set('user', DEV_USER);
+    await next();
+  };
 }