feat(catalog): store furniture bundles as .hab instead of .nitro

Every bundle the CMS writes — upload, clone, sync, repair and the pet /
effect / figure importers — now lands as `<classname>.hab`, the extension
this deployment's renderer asks for. `.hab` and `.nitro` are the same
container, so an upload of either extension is accepted.

Resolution goes through one module, src/lib/furni/bundle-file.ts, so
nothing has to know the extension twice. Every existence check probes
`.hab` first and falls back to `.nitro`: the on-disk asset set is still
predominantly `.nitro`, and without the fallback Studio would report every
imported item as missing and the cleanup scan would classify 18k live
bundles as fake leftovers. Downloads are unchanged — Habbo's CDN and every
configured clone source still serve `.nitro`, so the conversion happens on
write, not on request.

Deliberately unchanged: the staged-attachment store in furni-attachment.ts
keys on a UUID and never reaches the client, so renaming it would break
in-flight recovery jobs.

Adds scripts/migrate-nitro-to-hab.ts to rename the existing asset set. It
refuses to run without --dry-run or --yes, never overwrites an existing
.hab, never deletes, and is idempotent.

Note: renderer-config.json lives outside this repo and was patched to
.hab separately; that file is served with a 30-day max-age, so returning
clients need a cms-client cache purge to pick the change up.

src/lib/services/clone-import.ts

@@ -2,6 +2,7 @@ import { promises as fs } from "node:fs";
 import { eq, inArray, sql } from "drizzle-orm";
 import { db, ItemsBase, queryRows } from "@/lib/db";
 import { autoDetectInteraction } from "@/lib/furni/auto-interaction";
+import { bundleWritePathInDir } from "@/lib/furni/bundle-file";
 import { normalizeClassname } from "@/lib/furni/classname";
 import { HABBO_GAMEDATA_HOTEL_SETTING_KEY } from "@/lib/habbo-gamedata-hotel";
 import { logger } from "@/lib/logger";
@@ -293,11 +294,12 @@ export async function cloneSingleFurni(params: {
 	await ensureDirectories();
 	const { iconDir, nitroDir } = await getFurniAssetDirs();
 
-	// Download .nitro + icon directly from the source hotel.
+	// Download the bundle + icon directly from the source hotel. Sources serve
+	// `.nitro`; the local copy is stored as `.hab`.
 	await onProgress?.("downloading");
-	const nitroPath = getRuntimePath(
+	const nitroPath = bundleWritePathInDir(
 		/*turbopackIgnore: true*/ nitroDir,
-		`${classname}.nitro`,
+		classname,
 	);
 	const iconPath = getRuntimePath(
 		/*turbopackIgnore: true*/ iconDir,
@@ -331,8 +333,8 @@ export async function cloneSingleFurni(params: {
 		clonedNitroJson = parsed.json as Record<string, unknown>;
 	} catch {
 		await fs.unlink(/*turbopackIgnore: true*/ nitroPath).catch(() => {});
-		logger.warn("[clone-import] invalid .nitro bundle for", { classname });
-		return { ok: false, classname, warnings, error: "invalid .nitro bundle" };
+		logger.warn("[clone-import] invalid bundle for", { classname });
+		return { ok: false, classname, warnings, error: "invalid bundle" };
 	}
 	// Hotels ship PNG textures, so normalise every clone to WebP Lossless and
 	// make it match the SWF importer. A texture that will not re-encode is