feat(db): mesh data model — meshes, members, invites, audit log

- pgSchema "mesh" with 4 tables isolating the peer mesh domain
- Enums: visibility, transport, tier, role
- audit_log is metadata-only (E2E encryption enforced at broker/client)
- Cascade on mesh delete, soft-delete via archivedAt/revokedAt

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

packages/api/src/env.ts

@@ -0,0 +1,33 @@
+/* eslint-disable turbo/no-undeclared-env-vars */
+import { defineEnv } from "envin";
+import * as z from "zod";
+
+import { preset as auth } from "@turbostarter/auth/env";
+import { preset as billing } from "@turbostarter/billing/env";
+import { preset as db } from "@turbostarter/db/env";
+import { preset as email } from "@turbostarter/email/env";
+import { preset as monitoring } from "@turbostarter/monitoring-web/env";
+import { envConfig } from "@turbostarter/shared/constants";
+import { preset as storage } from "@turbostarter/storage/env";
+
+import type { Preset } from "envin/types";
+
+export const preset = {
+  id: "api",
+  server: {
+    OPENAI_API_KEY: z.string().optional(), // change it to your provider API key (e.g. ANTHROPIC_API_KEY if you use Anthropic)
+  },
+  extends: [billing, auth, db, email, storage, monitoring],
+} as const satisfies Preset;
+
+export const env = defineEnv({
+  ...envConfig,
+  ...preset,
+  env: {
+    ...process.env,
+    NEXT_PUBLIC_SENTRY_DSN: process.env.NEXT_PUBLIC_SENTRY_DSN,
+
+    NEXT_PUBLIC_POSTHOG_KEY: process.env.NEXT_PUBLIC_POSTHOG_KEY,
+    NEXT_PUBLIC_POSTHOG_HOST: process.env.NEXT_PUBLIC_POSTHOG_HOST,
+  },
+});