feat(db): mesh data model — meshes, members, invites, audit log

- pgSchema "mesh" with 4 tables isolating the peer mesh domain
- Enums: visibility, transport, tier, role
- audit_log is metadata-only (E2E encryption enforced at broker/client)
- Cascade on mesh delete, soft-delete via archivedAt/revokedAt

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

tooling/scripts/src/migrations.mjs

@@ -0,0 +1,58 @@
+import { execSync } from "node:child_process";
+
+export function checkPendingMigrations() {
+  try {
+    console.info("\x1b[34m%s\x1b[0m", "Checking for pending migrations...");
+
+    const output = execSync("pnpm --filter @turbostarter/db db:status", {
+      encoding: "utf-8",
+      stdio: "pipe",
+    });
+
+    const lines = output.split("\n");
+    const pendingStart = lines.findIndex(
+      (line) => line.trim() === "Pending migrations:",
+    );
+
+    let pendingMigrations = [];
+    if (pendingStart !== -1) {
+      for (let i = pendingStart + 1; i < lines.length; i++) {
+        const line = lines[i].trim();
+        if (line === "") continue;
+        if (line === "(none)") break;
+        if (line.startsWith("- ")) {
+          pendingMigrations.push(line.slice(2).trim());
+        } else {
+          break;
+        }
+      }
+    } else {
+      console.log(
+        "\x1b[33m%s\x1b[0m",
+        "⚠️  Could not determine pending migrations. Please check manually.",
+      );
+      return;
+    }
+
+    if (pendingMigrations.length > 0) {
+      console.log(
+        "\x1b[33m%s\x1b[0m",
+        "⚠️  There are pending migrations that need to be applied:",
+      );
+      pendingMigrations.forEach((migration) => console.log(`  - ${migration}`));
+      console.log(
+        "\nSome functionality may not work as expected until these migrations are applied.",
+      );
+      console.log(
+        '\nAfter testing the migrations in your local environment and ideally in a staging environment, please run "pnpm --filter @turbostarter/db db:migrate" to apply them to your database. If you have any questions, please open a support ticket.',
+      );
+    } else {
+      console.log("\x1b[32m%s\x1b[0m", "✅ All migrations are up to date.");
+    }
+  } catch (error) {
+    console.log(
+      "\x1b[33m%s\x1b[0m",
+      "❌ Could not connect to the database. Please ensure your connection string is up to date and your database instance is running.\n",
+    );
+  }
+}