Improvements: remove dead config, fix ESM, add URL validation, unify types, add missing logging

- Remove .prettierrc (dead config, Biome replaces Prettier)
- Rename lighthouserc.json to lighthouserc.cjs with module.exports for ESM compat
- Add logger.warn to empty catch blocks in auth, register, site-settings, prisma-cache, redis, security, rate-limit
- Unify ActionResult type: action-helper.ts uses 'ok' consistent with safe-action-shared.ts
- Add noUnusedLocals + noUnusedParameters to tsconfig + fix 25 pre-existing unused vars
- Replace barrel export src/types/index.ts with direct @/types/common imports
- Make trustHost conditional (development only) in auth.ts
- Add pre-flight URL validation to update-Nitrov3.sh to catch image.library.url misconfigurations
- Improve NITRO_IMAGE_LIBRARY_URL content validation in pre-flight & post-compute checks

src/lib/deploy-workflow-contract.test.ts

@@ -22,10 +22,10 @@ describe("production deploy workflow", () => {
 
 	it("reclaims ownership before git operations so www-data files can be overwritten", () => {
 		expect(workflow).toContain(
-			'sudo chown -R "$' + "{DEPLOY_USER}:" + '$' + '{DEPLOY_GROUP}"',
+			'sudo chown -R "$' + "{DEPLOY_USER}:" + "$" + '{DEPLOY_GROUP}"',
 		);
 		const reclaimAt = deployJob.indexOf(
-			'sudo chown -R "$' + "{DEPLOY_USER}:" + '$' + '{DEPLOY_GROUP}"',
+			'sudo chown -R "$' + "{DEPLOY_USER}:" + "$" + '{DEPLOY_GROUP}"',
 		);
 		const fetchAt = deployJob.indexOf('git -C "${LIVE}" fetch origin --prune');
 		expect(reclaimAt).toBeGreaterThan(-1);
@@ -79,7 +79,7 @@ describe("production deploy workflow", () => {
 			'export APP_VERSION="$(git -C "${LIVE}" rev-parse --short origin/main)"',
 		);
 		expect(workflow).toContain(
-			'export NEXT_PUBLIC_APP_VERSION="$' + "{APP_VERSION}\"",
+			'export NEXT_PUBLIC_APP_VERSION="$' + '{APP_VERSION}"',
 		);
 	});