Codemod db pass-through calls to domain modules: tasks + agents (C1 part 1/3)

Rewrite ~525 call sites from `db.<method>()` to `db.<module>.<method>()`
for tasks and agents domains (including `getAgent`/`findAgent`/`getTask`
which live on the `entityCrud` field). Delete the corresponding
pass-through methods on AppDatabaseBase. Structural types that narrowed
`db` to a bag of flat methods (CapabilityMatchDb, EscalationDeps,
SweepStaleReviewsDeps) are reshaped to match the new namespace. Internal
callback references inside database.ts/database-base.ts now invoke the
owning module directly (e.g. `this.agents.saveAgent`) rather than the
deleted pass-through.

The codemod lives at scripts/codemod/remove-appdatabase-passthrough.mjs
and filters by owning module + optional explicit method list. It is
idempotent and does not re-rewrite already-namespaced calls.

src/main/ipc-core-operations-handlers.ts

@@ -189,7 +189,7 @@ export function registerCoreOperationHandlers({
     emitEvent({ type: "agent-message", taskId: parsed.taskId, comment });
     emitEvent({ type: "task-updated", taskId: parsed.taskId, action: "updated" });
     try {
-      const task = db.getTask(parsed.taskId);
+      const task = db.entityCrud.getTask(parsed.taskId);
       if (task.assigneeAgentId) {
         wakeAgentIfPossible(task.assigneeAgentId, task.companyId, "comment");
       }
@@ -211,7 +211,7 @@ export function registerCoreOperationHandlers({
     if (!db.belongsToCompany("agents", parsed.agentId, parsed.companyId)) {
       return fail("AGENT_NOT_FOUND", "Agent not found in the current company.");
     }
-    db.setHeartbeat(parsed.agentId, parsed.enabled, parsed.intervalSec);
+    db.agents.setHeartbeat(parsed.agentId, parsed.enabled, parsed.intervalSec);
     db.addActivity({
       companyId: parsed.companyId,
       actor: "board",