REFACTORED - migrate the data layer from Prisma to Drizzle (unify the stack)

- Add lib/db (Drizzle schema: 7 tables + 6 enums + relations, postgres.js client),
  drizzle.config.ts, lib/db/enums.ts (Prisma-compatible enum objects)
- Rewrite all 14 app consumers + 4 admin components to Drizzle
- Move the test DB layer to Drizzle + in-process PGlite; convert all 8 integration
  test files + factories (371 tests green)
- Remove Prisma: deps, prisma/ schema+migrations, lib/prisma.ts, Dockerfile prisma
  generate; wire db:generate/migrate/push/studio to drizzle-kit; update Makefile
- Preserve the old seed as scripts/legacy-prisma-seed.cjs (needs a Drizzle rewrite)

tests/integration/media-service.test.ts

@@ -2,9 +2,12 @@ import { readFile } from "fs/promises";
 
 import { describe, expect, it } from "vitest";
 
+import { eq } from "drizzle-orm";
+
 import { resolveMediaSelection } from "@/lib/media-service";
 import { resolveMediaUploadPath } from "@/lib/media-storage";
-import { prisma } from "@/lib/prisma";
+import { db } from "@/lib/db";
+import { mediaAsset } from "@/lib/db/schema";
 import { createMediaAsset } from "@/tests/helpers/factories";
 import { canManageUploads } from "@/tests/helpers/fs-capability";
 
@@ -47,7 +50,7 @@ describe("resolveMediaSelection — external mode", () => {
     expect(result.createdAssetId).toBeTruthy();
     expect(result.url).toBe("https://cdn/new/photo.png");
 
-    const stored = await prisma.mediaAsset.findUnique({ where: { id: result.assetId! } });
+    const stored = await db.query.mediaAsset.findFirst({ where: eq(mediaAsset.id, result.assetId!) });
     expect(stored?.source).toBe("EXTERNAL");
     expect(stored?.fileName).toBe("photo.png");
     expect(stored?.label).toBe("Photo");
@@ -108,7 +111,7 @@ describe("resolveMediaSelection — upload mode (filesystem)", () => {
       required: true,
     });
     expect(result.uploadedUrl).toBeTruthy();
-    const stored = await prisma.mediaAsset.findUnique({ where: { id: result.assetId! } });
+    const stored = await db.query.mediaAsset.findFirst({ where: eq(mediaAsset.id, result.assetId!) });
     expect(stored?.source).toBe("UPLOAD");
     // File actually written to disk
     const bytes = await readFile(resolveMediaUploadPath(result.url));