* chore(runtime): cut over to Node 26 across runtime and types

Coordinated Node 24 → 26 upgrade for engines, @types/node, CI, Compose
mocks, Docker build image, and distroless runtime. Records support policy
and closes the #34 rollup that Dependabot PRs #1 and #8 could not land alone.

* fix(ci): Node 26 corepack install and drizzle migration snapshots

Official node:26-bookworm-slim no longer ships corepack on PATH. Replace
hand-written migrations 0022/0023 with drizzle-kit output so the
committed-migrations CI check stays clean.

* chore(test): remove retired web UI Playwright E2E suite

Drop browser E2E specs, Playwright configs/deps, and CI steps. Muster is
the Hermes MCP control plane; unit/package tests and homelab shell checks
remain.

* docs: drop Playwright from Node 26 release checklist

* ci: cut PR wall-clock — parallel jobs, one image build, Docker cache

- Cancel in-progress PR runs
- Drop MinIO from quality (unit tests mock object storage)
- Turbo local cache on GHA
- Parallel quality + container (container no longer waits on quality for PRs)
- Remove duplicate full image build from security workflow on PR/push
  (weekly schedule retains deep Trivy pass)
- Dockerfile: manifest-first layers + pnpm/turbo BuildKit caches
- Tighter .dockerignore for smaller build context

* fix(docker): drop unsupported COPY --parents for BuildKit 1.7

GHA buildx rejects --parents on dockerfile:1.7. Use explicit per-package
manifest COPY lines so the lockfile-first layer cache still works.