feat(telemetry): collections, universal server-fn coverage, beacon, client tracker

- activities indexes + client_events/client_errors/rollups/alerts collections
- global function middleware via createStart; reads skipped on success
- actor stash, denial dedup, control-flow error guards
- api route logging, auth event overrides, beacon endpoint, web vitals
- centralized admin role checks, shared skeletons, award-badges fix
- extracted deriveRunState with tests

package.json

@@ -53,6 +53,7 @@
     "twilio": "^5.8.0",
     "vaul": "^1.1.2",
     "web-push": "^3.6.7",
+    "web-vitals": "^6.2.0",
     "zod": "^4.0.15"
   },
   "devDependencies": {