feat: phase 3 observability — IMS telemetry merge

Port IMS telemetry into Primora conventions:

- core.components/core.events (migration 00004 + sqlc) scoped to projects
- POST /api/v1/ingest — single or <=500-event batches via project prm_
  keys (X-Primora-Key alias), auto-registering components, permissive CORS
- Issues: fingerprint-grouped errors with count/severity/first+last seen
- Reads: events w/ filters + before-cursor, components, stats (1h/24h/7d/30d
  bucketed series + component health + totals + metric names), metric
  series (avg/p50/p95/max)
- GET .../telemetry/stream — project-scoped SSE through an in-process hub
  (buffered subs, drop-on-slow, 25s keepalives); ?api_key=/?token= auth
  for EventSource
- Telemetry page: health/issues/events/metrics/integrate tabs, live badge,
  390px-clean; demo stubs
- @primora/client SDK (createPrimoraClient: capture*/heartbeat/installAuto,
  queued keepalive flushes)
- MCP: primora_list_issues/list_events/telemetry_stats/metric_series
- IMS README deprecation note pointing here

Also fixes workspace pins to 0.3.0 — npm ci in the frontend image was
resolving the unpublished 0.2.0 spec from the registry.

Generated with [Devin](https://devin.ai)

Co-Authored-By: Devin <158243242+devin-ai-integration[bot]@users.noreply.github.com>

apps/frontend/src/components/AppShell.tsx

@@ -8,6 +8,7 @@ import {
   IconStorage,
   IconCollections,
   IconDatabases,
+  IconTelemetry,
   IconAudit,
   IconAuth,
   IconSettings,
@@ -26,6 +27,7 @@ export type ViewType =
   | "storage"
   | "collections"
   | "databases"
+  | "telemetry"
   | "auth"
   | "audit"
   | "settings";
@@ -40,14 +42,15 @@ interface NavEntry {
 const projectNav: NavEntry[] = [
   { id: "dashboard", label: "Overview", icon: IconOverview },
   { id: "databases", label: "Databases", shortLabel: "DBs", icon: IconDatabases },
+  { id: "telemetry", label: "Telemetry", shortLabel: "Signals", icon: IconTelemetry },
   { id: "storage", label: "Storage", icon: IconStorage },
   { id: "collections", label: "Collections", icon: IconCollections },
   { id: "auth", label: "Authentication", shortLabel: "Auth", icon: IconAuth },
   { id: "audit", label: "Audit log", shortLabel: "Audit", icon: IconAudit },
 ];
 
-// Instagram-style bottom bar caps at five slots — Collections and Audit stay reachable via Menu.
-const bottomNav: NavEntry[] = projectNav.filter((e) => e.id !== "collections");
+// Instagram-style bottom bar caps at five slots — Collections and Telemetry stay reachable via Menu.
+const bottomNav: NavEntry[] = projectNav.filter((e) => e.id !== "collections" && e.id !== "telemetry");
 
 const workspaceNav: NavEntry[] = [
   { id: "projects", label: "Projects", icon: IconProjects },
@@ -84,6 +87,7 @@ const viewTitle: Record<ViewType, string> = {
   storage: "Storage",
   collections: "Collections",
   databases: "Databases",
+  telemetry: "Telemetry",
   auth: "Authentication",
   audit: "Audit log",
   settings: "Settings",