fix(setup): remove glob deprecation, auto-generate encryption key, fix migration verify

[atlanticplatformgroup]

What changed

1. Replaced deprecated glob with fast-glob

• Removed glob@11.1.0 from packages/api dependencies
• Updated asset-usage.ts to import from fast-glob (already used elsewhere)
• Eliminates the npm deprecation warning on install

2. Auto-generate ENCRYPTION_KEY on first setup

• setup.mjs now generates a valid 64-character hex key via crypto.randomBytes(32) when copying .env files
• Replaces the placeholder value so the validation warning doesn't confuse new users
• Same key is written to both root .env and packages/api/.env

3. Fixed migration verification credentials

• verify-migrations.mjs was hardcoding postgres:postgres which doesn't match Docker Compose credentials (oricms:oricms)
• Now derives the admin URL from DATABASE_URL env var, using the same host/port/credentials but connecting to the postgres database
• Fixes the P1000 auth failure on first run

4. Suppressed Prisma update nag

• Sets PRISMA_HIDE_UPDATE_MESSAGE=1 during db:generate and db:migrate in setup.mjs
• No more "Update available 5.22.0 -> 7.8.0" banner on first run

5. Better failure message

• Migration verification failure now says it's usually a credentials issue and can be ignored if migrations applied successfully
• Instead of the misleading "no PostgreSQL in environment" message

Verification

• npm install succeeds (no glob deprecation warning)
• npm run build -w @ori/shared succeeds
• npm run type-check -w @ori/api succeeds
• npm run build:check -w @ori/web succeeds