feat(db): mesh data model — meshes, members, invites, audit log

- pgSchema "mesh" with 4 tables isolating the peer mesh domain
- Enums: visibility, transport, tier, role
- audit_log is metadata-only (E2E encryption enforced at broker/client)
- Cascade on mesh delete, soft-delete via archivedAt/revokedAt

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

packages/storage/src/lib/schema.ts

@@ -0,0 +1,13 @@
+import * as z from "zod";
+
+import { env } from "../env";
+
+export const getObjectUrlSchema = z.object({
+  path: z.string(),
+  bucket: z
+    .string()
+    .optional()
+    .default(env.S3_BUCKET ?? ""),
+});
+
+export type GetObjectUrlInput = z.input<typeof getObjectUrlSchema>;