feat: platform backbone and field capture, first part (checkpoint)

Platform backbone (plan 2026-10-13-plattform-rueckgrat), reviewed tasks:
- run roles api/worker/job/all with shared startup checks (Task 1)
- schema and migration for DomainEvent, deliveries, JobRun, ThrottlerHit (Task 2)
- audit, notifications and domain events written in the same transaction (Task 3)
- dispatcher with SKIP LOCKED claims, retries and stale release (Task 4)
- worker building blocks: tick, LISTEN/NOTIFY wake-up, health (Task 5)
- worker process and entry points (Task 6)
- throttler counters in Postgres (Task 19)
- separate keys per purpose with key ring (Task 20)
- public origin page without exact location (Task 22)
- shop keys split into read and write (Task 23)
- Kustomize base, components, overlay encry, CI validation (Task 26)

Field capture T3 (plan 2026-10-13-t3-erfassung-am-stand), reviewed tasks:
- brood frames, read endpoints, apiary overview and offline pack
- network basics, offline queue v3, navigation sheets, form building blocks
- new inspection with last-time hints and weather, varroa per day,
  treatment prefill, apiary page with round
- inspection photo (Task 10) is implemented, review pending

Not rolled out. Remaining tasks follow in later commits.

Co-Authored-By: Claude Opus 5.5 (1M context) <[email protected]>

ApiCore-Backend/src/winter-checks/winter-checks.service.spec.ts

@@ -0,0 +1,86 @@
+import { WinterChecksService } from './winter-checks.service';
+import { PrismaService } from '../prisma/prisma.service';
+import { AuditLogService } from '../audit/audit-log.service';
+import { CreateWinterCheckDto } from './dto/create-winter-check.dto';
+
+describe('WinterChecksService', () => {
+  const livingColony = { id: 'c1', status: 'ACTIVE', apiaryId: 'a1' };
+  const lostCheck: CreateWinterCheckDto = {
+    colonyId: 'c1',
+    season: 'SPRING',
+    date: '2027-03-20',
+    outcome: 'LOST',
+    lossCause: 'DEAD_OR_EMPTY',
+    markColonyDeceased: true,
+  };
+
+  let service: WinterChecksService;
+  let tx: {
+    winterCheck: { create: jest.Mock };
+    colony: { update: jest.Mock };
+    auditLog: { create: jest.Mock };
+  };
+  let prisma: {
+    colony: { findUnique: jest.Mock };
+    $transaction: jest.Mock;
+  };
+  let auditLog: { record: jest.Mock };
+
+  beforeEach(() => {
+    tx = {
+      winterCheck: {
+        create: jest
+          .fn()
+          .mockImplementation(({ data }: { data: object }) =>
+            Promise.resolve({ id: 'w1', ...data }),
+          ),
+      },
+      colony: {
+        update: jest
+          .fn()
+          .mockResolvedValue({ ...livingColony, status: 'DECEASED' }),
+      },
+      auditLog: { create: jest.fn() },
+    };
+    prisma = {
+      colony: { findUnique: jest.fn().mockResolvedValue(livingColony) },
+      $transaction: jest
+        .fn()
+        .mockImplementation((work: (client: typeof tx) => Promise<unknown>) =>
+          work(tx),
+        ),
+    };
+    auditLog = { record: jest.fn() };
+    service = new WinterChecksService(
+      prisma as unknown as PrismaService,
+      auditLog as unknown as AuditLogService,
+    );
+  });
+
+  it('audits a colony marked deceased through the audit service inside the transaction', async () => {
+    await service.create(lostCheck, 'u1');
+
+    expect(auditLog.record).toHaveBeenCalledWith(
+      {
+        entityType: 'Colony',
+        entityId: 'c1',
+        action: 'UPDATE',
+        userId: 'u1',
+        beforeData: livingColony,
+        afterData: { ...livingColony, status: 'DECEASED' },
+      },
+      tx,
+    );
+    expect(tx.auditLog.create).not.toHaveBeenCalled();
+  });
+
+  it('writes no colony audit when the colony is not to be marked deceased', async () => {
+    await service.create({ ...lostCheck, markColonyDeceased: false }, 'u1');
+
+    expect(tx.colony.update).not.toHaveBeenCalled();
+    const auditedTypes = (
+      auditLog.record.mock.calls as [{ entityType: string }][]
+    ).map(([input]) => input.entityType);
+    expect(auditedTypes).toEqual(['WinterCheck']);
+  });
+});