feat: socle BDD (tâche 1.9 Phase 1-2) + moteur APT (tâche 2 SJ-0→3) + WIP capabilities/auth/Rust

Checkpoint multi-chantiers (arbre vert : tsc 0 erreur, 70 tests, build OK).
- tâche 1.9 Phase 1 : schéma socle (machine_state/events/reports/raw_artifacts/
  hardware/metrics + colonnes étendues) + wiring refresh/execute. Migration 0002.
- tâche 1.9 Phase 2 : machine_credentials + machine_host_keys (non destructif,
  dual-read + backfill). Migration 0003. Fix séquence journal de migration.
- tâche 2 : SJ-0 (types étendus rétro-compatibles, réducteur Docker, resolveTemplate),
  SJ-1 (update-analyze enrichi), SJ-2 (apply + diff dpkg + timeout inactivité SSH),
  SJ-3 (reboot vérifié boot_id).
- WIP parallèle inclus : /api/capabilities, auth/apiTokens/apiClients, system metrics,
  scaffold app_rust, ajustements frontend.

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>

server/templates/aptReduce.test.ts

@@ -1,6 +1,6 @@
 // server/templates/aptReduce.test.ts
 import { describe, it, expect } from "vitest";
-import { reduceAptLines } from "./aptReduce.js";
+import { reduceAptLines, reduceLines } from "./aptReduce.js";
 
 describe("reduceAptLines", () => {
   it("ne garde que les lignes utiles", () => {
@@ -26,4 +26,22 @@ describe("reduceAptLines", () => {
   it("retourne un tableau vide si rien d'utile", () => {
     expect(reduceAptLines("Reading package lists...\nDone")).toEqual([]);
   });
+
+  it("garde aussi les lignes Docker utiles", () => {
+    const raw = [
+      "Pulling jellyfin ...",
+      "Status: Downloaded newer image for jellyfin/jellyfin:latest",
+      "Recreating jellyfin ...",
+      "Started jellyfin",
+      "blabla inutile",
+      "Total reclaimed space: 1.2GB",
+    ].join("\n");
+    expect(reduceLines(raw)).toEqual([
+      "Pulling jellyfin ...",
+      "Status: Downloaded newer image for jellyfin/jellyfin:latest",
+      "Recreating jellyfin ...",
+      "Started jellyfin",
+      "Total reclaimed space: 1.2GB",
+    ]);
+  });
 });