fix(perf): enforce route budgets and ratchet coverage thresholds

Allow mode: enforce in the report config, fail the command on over-budget and
unavailable routes, and make the markdown wording follow the configured mode.
Recalibrate the budgets against the webpack build (baseline x1.15, rounded up to
the next 10 KiB) now that the old Turbopack numbers no longer apply, so the
Docker image build gate blocks genuine bundle regressions instead of only
warning. Raise the Vitest coverage thresholds to the measured floor
(37.17/30.1/31.79/38.17 -> 36/29/30/37).

scripts/performance-budgets.json

@@ -1,36 +1,36 @@
 {
 	"schemaVersion": 1,
-	"mode": "informational",
+	"mode": "enforce",
 	"routes": [
 		{
 			"route": "/me",
-			"maxInitialRawBytes": 890880,
-			"maxInitialGzipBytes": 276480
+			"maxInitialRawBytes": 716800,
+			"maxInitialGzipBytes": 225280
 		},
 		{
 			"route": "/news",
-			"maxInitialRawBytes": 880640,
-			"maxInitialGzipBytes": 276480
+			"maxInitialRawBytes": 716800,
+			"maxInitialGzipBytes": 225280
 		},
 		{
 			"route": "/events",
-			"maxInitialRawBytes": 890880,
-			"maxInitialGzipBytes": 276480
+			"maxInitialRawBytes": 716800,
+			"maxInitialGzipBytes": 225280
 		},
 		{
 			"route": "/search",
-			"maxInitialRawBytes": 890880,
-			"maxInitialGzipBytes": 276480
+			"maxInitialRawBytes": 716800,
+			"maxInitialGzipBytes": 225280
 		},
 		{
 			"route": "/admin/catalog",
-			"maxInitialRawBytes": 1904640,
-			"maxInitialGzipBytes": 573440
+			"maxInitialRawBytes": 1208320,
+			"maxInitialGzipBytes": 389120
 		},
 		{
 			"route": "/admin/studio/furni",
-			"maxInitialRawBytes": 1433600,
-			"maxInitialGzipBytes": 450560
+			"maxInitialRawBytes": 1607680,
+			"maxInitialGzipBytes": 522240
 		}
 	]
 }