feat: enhanced typescript options (#100)

* chore(typescript): add enhanced compiler options

Add 5 strict TypeScript compiler options to improve type safety:
- noUncheckedIndexedAccess: Ensures array access returns T | undefined
- useUnknownInCatchVariables: Catch variables typed as unknown
- allowUnreachableCode: Disallow unreachable code
- allowUnusedLabels: Disallow unused labels
- noImplicitOverride: Require explicit override keyword

Applied across all packages (api, app, tricorder) for consistent
type safety standards.

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-Authored-By: Claude Sonnet 4.5 <noreply@anthropic.com>

* fix(api): resolve type errors from enhanced TypeScript options

Fix ~100 type errors across API routers to comply with stricter
TypeScript configuration:

- Add non-null assertions after explicit runtime checks
- Use optional chaining for regex match groups
- Add explicit null checks for database .returning() calls
- Extract pagination params to preserve Zod default values
- Fix array access patterns with length guards

All changes maintain runtime safety while satisfying strict type
checking. No behavior changes.

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-Authored-By: Claude Sonnet 4.5 <noreply@anthropic.com>

* refactor(api): extract shared schemas and helpers in admin router

Reduce code duplication in admin.ts by extracting reusable components:

- Extract blockedDomainReasonSchema (used 8 times, saves ~60 lines)
- Extract planOutputSchema (used 2 times, saves ~12 lines)
- Extract globalSettingsOutputSchema
- Add transformAdminUser() helper (saves ~60 lines)
- Add formatGlobalSettings() helper (saves ~13 lines)

Net reduction: 56 lines removed (278 deleted, 222 added)
All tests passing, no behavior changes.

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-Authored-By: Claude Sonnet 4.5 <noreply@anthropic.com>

---------

Co-authored-by: Claude Sonnet 4.5 <noreply@anthropic.com>

Author: KyleTryon

packages/api/src/cli/create-admin.ts

@@ -81,7 +81,7 @@ async function main() {
     console.log(`✅ Successfully promoted '${username}' to admin`);
     console.log(`   User ID: ${user.id}`);
     console.log(`   Email: ${user.email}`);
-    console.log(`   Plan: ${updatedUser.plan}`);
+    console.log(`   Plan: ${updatedUser?.plan ?? "unknown"}`);
 
     sqlite.close();
     process.exit(0);

packages/api/src/hono/app.ts

@@ -307,5 +307,5 @@ function getCorsOrigins(env: Env): string | string[] {
       ? []
       : ["http://localhost:5173", "http://localhost:3000"];
 
-  return allowedOrigins.length === 1 ? allowedOrigins[0] : allowedOrigins;
+  return allowedOrigins.length === 1 ? allowedOrigins[0]! : allowedOrigins;
 }