feat: standalone module-build readiness for the public @ekklesia packages (ADR 0053)

Makes the public module-development package set usable from a module
repository outside the monorepo. Nothing is published.

- Curated @ekklesia/module-sdk: an explicit author API, no contracts
  barrel, no identity/authorization internals, no Drizzle and no legacy
  ModuleDatabase type. defineModuleRuntime returns the SDK's own named
  interfaces so a module's emitted declarations never reach into
  @ekklesia/contracts. defineModuleSchema is gone; createModuleTable and
  defineModuleSchemaMetadata live in @ekklesia/module-database.
- Drizzle: no longer a dependency of module-sdk or contracts. Core keeps
  the legacy Drizzle schema validator (moved to core/src/modules) and
  its legacy runtime support; drizzle-orm is an optional peer only.
- React is a peer (plus devDependency) of @ekklesia/ui; the boundary
  checker allows exactly that consumer-selected peer.
- @ekklesia/typescript-config is publishable; module-ui-host is private.
  Every public package carries "ekklesia.distribution":
  "module-development" and no monorepo-root prepack.
- module-pack reads the Node.js range from the module's own engines.node
  and recognizes Ekklesia packages by name plus that marker, so
  registry-installed packages are incorporated, SDK-compatibility
  checked, and never credited as third-party.
- scripts/pack-public-packages.ts (pnpm packages:pack) rebuilds, packs
  and inspects the nine public tarballs; scripts/test-standalone-module.sh
  (pnpm test:standalone-module, new CI job) installs them into a fixture
  module outside the repository and proves it typechecks, builds,
  packages, and verifies.
- Public-package boundary tests and module-development docs.

Co-Authored-By: Claude Opus 5.5 <[email protected]>

templates/module/package.json

@@ -4,6 +4,9 @@
   "license": "AGPL-3.0-or-later",
   "private": true,
   "type": "module",
+  "engines": {
+    "node": ">=24.11.0 <25"
+  },
   "files": [
     "dist",
     "drizzle",

templates/module/src/schema/tables.ts

@@ -1,4 +1,4 @@
-import { createModuleTable } from "@ekklesia/module-sdk";
+import { createModuleTable } from "@ekklesia/module-database/drizzle";
 import { text, uuid } from "drizzle-orm/pg-core";
 
 const moduleTable = createModuleTable("example");

templates/module/src/server/index.ts

@@ -27,7 +27,7 @@ export default defineModuleRuntime({
       // make this choice consciously: 0 means "no body accepted" (a non-empty declared or streamed
       // body is rejected before this handler ever runs); a route that does accept a body declares
       // its own explicit byte maximum instead, up to the platform's ceiling
-      // (`MODULE_ROUTE_MAX_BODY_BYTES_CEILING`, `@ekklesia/contracts`).
+      // (`MODULE_ROUTE_MAX_BODY_BYTES_CEILING`, `@ekklesia/module-sdk`).
       maxBodyBytes: 0,
       async handler(_request, context) {
         const database = moduleDrizzle(context.services.database);

templates/module/tests/manifest.test.ts

@@ -1,12 +1,12 @@
 import { createHash } from "node:crypto";
 import { readFile } from "node:fs/promises";
+import type { ModuleDatabaseExecutor } from "@ekklesia/module-database";
 import {
   ANONYMOUS_PRINCIPAL,
   type CapabilityId,
   EMPTY_MODULE_CONFIGURATION,
   EMPTY_MODULE_STORAGE,
   type ModuleConfiguration,
-  type ModuleDatabaseExecutor,
   type ModuleRouteDefinitionInput,
   type ModuleRouteHandlerContext,
   type ModuleRuntimeServices,