feat(telemetry): collections, universal server-fn coverage, beacon, client tracker

- activities indexes + client_events/client_errors/rollups/alerts collections
- global function middleware via createStart; reads skipped on success
- actor stash, denial dedup, control-flow error guards
- api route logging, auth event overrides, beacon endpoint, web vitals
- centralized admin role checks, shared skeletons, award-badges fix
- extracted deriveRunState with tests

pb_migrations/1787961600_activities_indexes.js

@@ -0,0 +1,23 @@
+/// <reference path="../pb_data/types.d.ts" />
+migrate((app) => {
+  const collection = app.findCollectionByNameOrId("pbc_1262591861")
+
+  unmarshal({
+    "indexes": [
+      "CREATE INDEX `idx_activities_created` ON `activities` (`created`)",
+      "CREATE INDEX `idx_activities_name_created` ON `activities` (`name`, `created`)",
+      "CREATE INDEX `idx_activities_player_created` ON `activities` (`player`, `created`)",
+      "CREATE INDEX `idx_activities_success_created` ON `activities` (`success`, `created`)"
+    ]
+  }, collection)
+
+  return app.save(collection)
+}, (app) => {
+  const collection = app.findCollectionByNameOrId("pbc_1262591861")
+
+  unmarshal({
+    "indexes": []
+  }, collection)
+
+  return app.save(collection)
+})