Codemod db pass-through calls to domain modules: tasks + agents (C1 part 1/3)

Rewrite ~525 call sites from `db.<method>()` to `db.<module>.<method>()`
for tasks and agents domains (including `getAgent`/`findAgent`/`getTask`
which live on the `entityCrud` field). Delete the corresponding
pass-through methods on AppDatabaseBase. Structural types that narrowed
`db` to a bag of flat methods (CapabilityMatchDb, EscalationDeps,
SweepStaleReviewsDeps) are reshaped to match the new namespace. Internal
callback references inside database.ts/database-base.ts now invoke the
owning module directly (e.g. `this.agents.saveAgent`) rather than the
deleted pass-through.

The codemod lives at scripts/codemod/remove-appdatabase-passthrough.mjs
and filters by owning module + optional explicit method list. It is
idempotent and does not re-rewrite already-namespaced calls.

src/main/agent-runtime/runtime-bridge.ts

@@ -266,7 +266,7 @@ export class RuntimeBridge {
    */
   private resolveAgentName(agentId: string): string {
     try {
-      const name = this.deps.db.findAgentName(agentId);
+      const name = this.deps.db.agents.findAgentName(agentId);
       if (name && name.length > 0) return name;
     } catch (error) {
       this.deps.logger.warn(
@@ -384,7 +384,7 @@ export class RuntimeBridge {
   ) {
     if (envelope.taskId) {
       try {
-        const task = this.deps.db.getTask(envelope.taskId);
+        const task = this.deps.db.entityCrud.getTask(envelope.taskId);
         return ensureTaskThread(this.deps.db, envelope.taskId, envelope.companyId, task.title);
       } catch (error) {
         this.deps.logger.warn(