Remove final AppDatabase pass-through methods with ESLint guard (C1 part 3/3)

Migrate all remaining pass-through call sites (social, skills, budget,
entityCrud, documents, knowledge, automation, wakeup, backup, threads,
settings, snapshot, connectors, workspaces, activity) to their owning
domain modules. `AppDatabase` now carries only three methods:

  - createHireRequest (multi-module composite: agents + approvalsMod)
  - rollbackConfigRevision (multi-module composite: documents + entityCrud)
  - queryAll (raw-SQL escape hatch, @internal)

The vault/env-binding infrastructure previously passed argument-by-
argument into `entityCrud.saveSecret`/`resolveSecretEnv` now binds at
module construction, letting callers invoke `db.entityCrud.saveSecret({...})`
without carrying vault plumbing.

Structural types that narrowed AppDatabase to a bag of flat methods
(`ConnectorModelPolicyDeps` callers, `CapabilityMatchDb`, test mocks in
budget-enforcement / budget-incidents / task-quality-gates /
failure-escalation / task-quality-gates-sweep) are reshaped to the new
namespace. `connectorPolicyDepsFromDb` replaces the old pattern of
handing the whole AppDatabase to `validateConnectorModelSelection`.

A new ESLint rule in eslint.config.mjs blocks new top-level methods on
AppDatabase so the pass-through layer cannot silently grow back.
`AppDatabase.ts` dropped from 193 lines to 58; `AppDatabaseBase` lost
the 270-line trailing pass-through block.

src/main/bootstrap/prepare-services.ts

@@ -121,9 +121,9 @@ export function prepareServices(deps: PrepareServicesDeps): ServiceGraphHandles
     logger: deps.logger,
     getMainWindow: () => serviceGraph?.getDesktopShellService()?.getMainWindow() ?? null,
     getDb: () => ({
-      hasCompany: (companyId: string) => deps.db.hasCompany(companyId),
+      hasCompany: (companyId: string) => deps.db.settings.hasCompany(companyId),
       belongsToCompany: (table: string, id: string, companyId: string) =>
-        deps.db.belongsToCompany(table as Parameters<typeof deps.db.belongsToCompany>[0], id, companyId),
+        deps.db.settings.belongsToCompany(table as Parameters<typeof deps.db.settings.belongsToCompany>[0], id, companyId),
     }),
     notificationService,
   });

src/main/bootstrap/recover-interrupted-tasks.ts

@@ -39,7 +39,7 @@ export function emitCrashRecoveryNotification(deps: RecoverInterruptedTasksDeps)
  */
 export function recoverShutdownInterruptedTasks(deps: RecoverInterruptedTasksDeps): void {
   try {
-    const snapshot = deps.db.listSnapshot();
+    const snapshot = deps.db.snap.listSnapshot();
     const shutdownRuns = snapshot.runs.filter(
       (r) => r.status === "interrupted" &&
         (r.summary === "Application shut down." || r.summary === "Worker process crashed."),

src/main/bootstrap/recover-scheduled-posts.ts

@@ -15,9 +15,9 @@ export interface RecoverScheduledPostsDeps {
 export function recoverScheduledPosts(deps: RecoverScheduledPostsDeps): Set<ReturnType<typeof setTimeout>> {
   const timers = new Set<ReturnType<typeof setTimeout>>();
   try {
-    const snapshot = deps.db.listSnapshot();
+    const snapshot = deps.db.snap.listSnapshot();
     for (const company of snapshot.companies) {
-      const queuedActions = deps.db.listBrowserActions(company.id, { status: "queued" });
+      const queuedActions = deps.db.social.listBrowserActions(company.id, { status: "queued" });
       for (const action of queuedActions) {
         if (!action.payloadJson) continue;
         try {

src/main/bootstrap/run-startup-health-checks.ts

@@ -14,7 +14,7 @@ export async function runStartupHealthChecks(
   logger: Logger,
 ): Promise<void> {
   if (!connectorHealth) return;
-  const connectors = db.listSnapshot().connectors;
+  const connectors = db.snap.listSnapshot().connectors;
   const results = await Promise.allSettled(
     connectors.map((connector) => connectorHealth.checkConnector(connector.id)),
   );