fix: cache validation, narrow invalidation, ISR pre-render, robust CI redis wait (#1099, #1100, #1101, #1102) - #1152

Summary

Resolves the four open issues assigned to @Mirabel64 in one PR.

Closes #1099
Closes #1100
Closes #1101
Closes #1102

Changes

#1102 — Pre-generate popular property IDs in generateStaticParams

• src/lib/propertyServiceServer.ts: new getPopularPropertyIds(limit = 20) that returns featured property ids (falling back to the full catalogue when nothing is flagged featured).
• src/app/properties/[id]/page.tsx: generateStaticParams now returns real { id } entries instead of []. dynamicParams stays default (true), so non-listed ids are still generated on demand and revalidated by ISR (revalidate = 60).

#1101 — Validate JSON parsed from Redis before trusting cached payloads

• src/types/propertySchemas.ts: new zod schemas mirroring the Property domain types (propertySchema, propertySearchResultSchema, autocompleteResultsSchema, cacheStatsSchema).
• src/lib/redisCache.ts: every JSON.parse of a cache payload now goes through parseCached, which validates against a schema. Malformed or shape-mismatched entries are discarded (treated as a miss) instead of being cast to Property/SearchResult. Failures are logged and counted (cache:hit_rate:invalid, exposed as invalid in getStats).

#1100 — Property updates no longer flush the entire cache

• src/lib/redisCache.ts: writes maintain a per-property reverse index (index:property:<id>), and invalidateProperty deletes only the keys that embed that property, falling back to the old narrow pattern scan only when the index is missing. Also fixed invalidatePattern, whose DEL args were double-prefixed by ioredis and silently missed.
• src/lib/blockchainCacheInvalidator.ts: only membership-changing events (PropertyCreated, PropertyDelisted) flush listing:*/search:*; updates use the narrow index path.
• src/app/api/properties/route.ts: POST invalidates narrowly when an id is present, otherwise a listing/search flush.
• docs/cache-api.md: documented the new behaviour plus before/after hit-rate notes.

#1099 — Harden the Redis wait step in CI

• .github/workflows/ci.yml: replaced the fragile docker ps --filter ancestor=redis:7-alpine lookup with a deterministic lookup by published port (then service name), a bounded 30×2s retry, and a clear failure path that dumps docker ps -a and container logs.

Tests

• src/lib/__tests__/redisCache.test.ts: added poisoned-payload rejection, malformed listing rejection, stats shape (including invalid), and a narrow-invalidation test asserting an unrelated listing survives an update.
• src/lib/__tests__/propertyServiceServer.test.ts: asserts getPopularPropertyIds returns real, pre-renderable ids and respects the limit.

Test Suites: 2 passed, 2 total
Tests:       8 passed, 8 total

Typecheck shows no new errors versus main (the repo has pre-existing errors in this environment's stale node_modules; a before/after diff of tsc output is unchanged apart from line-number shifts).

Notes

• Harden Redis wait step in CI docker service startup #1099's acceptance criterion "CI green on repeated runs (document rerun evidence)" requires the CI workflow to run; the change is structured to be deterministic but should be confirmed by a green run on this PR.