refactor(infra): remove zitare + clock NestJS backends, add shared-hono package

Both apps are fully local-first via Dexie.js + mana-sync. Their NestJS
backends were pure CRUD wrappers (20 + 31 source files) that are no
longer needed.

Changes:
- Add packages/shared-hono: JWT auth via JWKS (jose), Drizzle DB factory,
  health route, generic GDPR admin handler, error middleware
- Migrate zitare lists page from fetch() to listsStore (local-first)
- Rewrite clock timers store from API-based to timerCollection (Dexie)
- Update clock +layout.svelte CommandBar search to use local collections
- Remove zitare-backend + clock-backend from docker-compose, CI/CD,
  Prometheus, env generation, setup scripts
- Add docs/TECHNOLOGY_AUDIT_2026_03.md with full repo analysis

Net result: -2 Docker containers, -2 ports, -2728 lines of code

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

scripts/generate-env.mjs

@@ -248,19 +248,7 @@ const APP_CONFIGS = [
 		},
 	},
 
-	// Zitare Backend (NestJS)
-	{
-		path: 'apps/zitare/apps/backend/.env',
-		vars: {
-			NODE_ENV: () => 'development',
-			PORT: (env) => env.ZITARE_BACKEND_PORT || '3007',
-			DATABASE_URL: (env) => env.ZITARE_DATABASE_URL,
-			MANA_CORE_AUTH_URL: (env) => env.MANA_CORE_AUTH_URL,
-			DEV_BYPASS_AUTH: () => 'true',
-			DEV_USER_ID: (env) => env.DEV_USER_ID || '00000000-0000-0000-0000-000000000000',
-			CORS_ORIGINS: (env) => env.CORS_ORIGINS,
-		},
-	},
+	// Zitare Backend: REMOVED — migrated to local-first
 
 	// Zitare Mobile (Expo)
 	{
@@ -506,19 +494,7 @@ const APP_CONFIGS = [
 		},
 	},
 
-	// Clock Backend (NestJS)
-	{
-		path: 'apps/clock/apps/backend/.env',
-		vars: {
-			NODE_ENV: () => 'development',
-			PORT: (env) => env.CLOCK_BACKEND_PORT || '3017',
-			DATABASE_URL: (env) => env.CLOCK_DATABASE_URL,
-			MANA_CORE_AUTH_URL: (env) => env.MANA_CORE_AUTH_URL,
-			DEV_BYPASS_AUTH: () => 'true',
-			DEV_USER_ID: (env) => env.DEV_USER_ID || '00000000-0000-0000-0000-000000000000',
-			CORS_ORIGINS: (env) => env.CORS_ORIGINS,
-		},
-	},
+	// Clock Backend: REMOVED — migrated to local-first
 
 	// Clock Web (SvelteKit)
 	{

scripts/mac-mini/ensure-containers-running.sh

@@ -154,7 +154,6 @@ for container in $ALL_PROBLEM_CONTAINERS; do
         mana-app-calendar-web) SERVICE_NAME="calendar-web" ;;
         mana-app-calendar-backend) SERVICE_NAME="calendar-backend" ;;
         mana-app-clock-web) SERVICE_NAME="clock-web" ;;
-        mana-app-clock-backend) SERVICE_NAME="clock-backend" ;;
         mana-app-contacts-web) SERVICE_NAME="contacts-web" ;;
         mana-app-contacts-backend) SERVICE_NAME="contacts-backend" ;;
         mana-app-storage-web) SERVICE_NAME="storage-web" ;;

scripts/setup-databases.sh

@@ -104,7 +104,7 @@ setup_service() {
             ;;
         zitare)
             create_db_if_not_exists "zitare"
-            push_schema "@zitare/backend" "zitare"
+            # Schema managed by mana-sync (backend removed)
             ;;
         contacts)
             create_db_if_not_exists "contacts"
@@ -116,7 +116,7 @@ setup_service() {
             ;;
         clock)
             create_db_if_not_exists "clock"
-            push_schema "@clock/backend" "clock"
+            # Schema managed by mana-sync (backend removed)
             ;;
         todo)
             create_db_if_not_exists "todo"