refactor: replace Prisma ORM runtime with Drizzle ORM facade

- Replace Prisma client runtime with Drizzle ORM (zero Prisma engine/query engine in production)
- Add Prisma-compatible facade (@/lib/prisma-facade.ts) backed by Drizzle for backwards compatibility
- Runtime queries route through Drizzle ORM; @prisma/client is now devDependency (types only)
- Remove @prisma/adapter-mariadb dependency; delete prisma-pool.ts and types/prisma.ts
- New Drizzle schema layer: src/db/schema.ts (176 tables) and src/lib/db.ts (connection)
- Update README documenting the dual-layer ORM architecture
- Restore src/generated/ gitignore (build artifact for local type generation)
- 0 TypeScript errors, 583 tests passing

The facade intentionally uses `any` types to match the Prisma Client API surface,
allowing existing code to run unmodified while routing queries through Drizzle at runtime.

src/lib/admin/acl-management-contract.test.ts

@@ -6,7 +6,7 @@ describe("ACL management contract", () => {
 		const source = readFileSync("src/actions/permissions.ts", "utf8");
 		expect(source).toContain("PERMS.PERMISSIONS_MANAGE");
 		expect(source).toContain("adminAction");
-		expect(source).toContain("aclModelPermission");
+		expect(source).toContain("AclModelPermission");
 		expect(source).not.toContain("websiteHousekeepingPermissions");
 		expect(source).not.toContain("websiteTeams");
 	});

src/lib/admin/log-filters.ts

@@ -1,5 +1,3 @@
-import type { Prisma } from "@/generated/prisma/client";
-
 export interface StaffActivityFilters {
 	q?: string;
 	staffId?: number | null;
@@ -9,8 +7,8 @@ export interface StaffActivityFilters {
 
 export function buildStaffActivityWhere(
 	filters: StaffActivityFilters,
-): Prisma.StaffActivitiesWhereInput {
-	const where: Prisma.StaffActivitiesWhereInput = {};
+): any {
+	const where: any = {};
 	if (filters.q?.trim())
 		where.OR = [
 			{ action: { contains: filters.q.trim() } },