Harden deploy gates, prod AUTH_SECRET, and Sentry error reporting.

Align onlyBuiltDependencies with the workspace, fail fast without AUTH_SECRET in production, and delete catalog_items via VARCHAR-safe SQL so page deletes do not leave orphans.

Co-authored-by: Cursor <[email protected]>

src/lib/foundation/action.ts

@@ -3,6 +3,7 @@ import { logAuthorizationEvent } from "@/lib/admin/authorization-events";
 import { auth } from "@/lib/auth";
 import { canAccess, getApiAdminContext } from "@/lib/permissions";
 import { rateLimit } from "@/lib/rate-limit";
+import { reportError } from "@/lib/report-error";
 import {
 	DatabaseError,
 	ForbiddenError,
@@ -247,11 +248,6 @@ export function handleActionError(error: unknown): ActionFailure {
 		return fail("Not found");
 	}
 
-	console.error(
-		"[Action error]",
-		error instanceof Error
-			? { message: error.message, name: error.name }
-			: error,
-	);
+	reportError(error, "Action error");
 	return fail("Internal server error");
 }