Scaffold Homelab Manager foundation

Monorepo (Express+TS+Drizzle/libSQL server, React+Vite+Tabler web) matching
the stack used by ScheduleTaskManager and Sloth Manager. Includes Authentik
OIDC login with local admin/operator/viewer roles (first user becomes admin),
a generalized audit log, encrypted-at-rest storage for future integration API
tokens, the DB schema for all planned modules, and the Tabler-styled app
shell/nav. Also ports the Secrets (expiry tracker) and IP Addresses (IPAM)
modules from Sloth Manager onto the new stack.

Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>

server/drizzle/0000_tricky_nocturne.sql

@@ -0,0 +1,127 @@
+CREATE TABLE `audit_log` (
+	`id` integer PRIMARY KEY AUTOINCREMENT NOT NULL,
+	`actor_user_id` integer,
+	`actor_label` text,
+	`category` text NOT NULL,
+	`action` text NOT NULL,
+	`target_type` text,
+	`target_id` text,
+	`detail` text,
+	`created_at` text DEFAULT (current_timestamp) NOT NULL,
+	FOREIGN KEY (`actor_user_id`) REFERENCES `users`(`id`) ON UPDATE no action ON DELETE set null
+);
+--> statement-breakpoint
+CREATE TABLE `dns_providers` (
+	`id` integer PRIMARY KEY AUTOINCREMENT NOT NULL,
+	`provider_type` text NOT NULL,
+	`name` text NOT NULL,
+	`credential_id` integer,
+	`config` text,
+	`enabled` integer DEFAULT true NOT NULL,
+	`created_at` text DEFAULT (current_timestamp) NOT NULL,
+	FOREIGN KEY (`credential_id`) REFERENCES `integration_credentials`(`id`) ON UPDATE no action ON DELETE set null
+);
+--> statement-breakpoint
+CREATE TABLE `dns_records_cache` (
+	`id` integer PRIMARY KEY AUTOINCREMENT NOT NULL,
+	`provider_id` integer NOT NULL,
+	`zone` text NOT NULL,
+	`record_type` text NOT NULL,
+	`name` text NOT NULL,
+	`value` text NOT NULL,
+	`ttl` integer,
+	`raw` text,
+	`synced_at` text DEFAULT (current_timestamp) NOT NULL,
+	FOREIGN KEY (`provider_id`) REFERENCES `dns_providers`(`id`) ON UPDATE no action ON DELETE cascade
+);
+--> statement-breakpoint
+CREATE TABLE `integration_credentials` (
+	`id` integer PRIMARY KEY AUTOINCREMENT NOT NULL,
+	`name` text NOT NULL,
+	`encrypted_secret` text NOT NULL,
+	`created_at` text DEFAULT (current_timestamp) NOT NULL
+);
+--> statement-breakpoint
+CREATE TABLE `integrations` (
+	`id` integer PRIMARY KEY AUTOINCREMENT NOT NULL,
+	`type` text NOT NULL,
+	`name` text NOT NULL,
+	`base_url` text NOT NULL,
+	`credential_id` integer,
+	`config` text,
+	`enabled` integer DEFAULT true NOT NULL,
+	`created_at` text DEFAULT (current_timestamp) NOT NULL,
+	FOREIGN KEY (`credential_id`) REFERENCES `integration_credentials`(`id`) ON UPDATE no action ON DELETE set null
+);
+--> statement-breakpoint
+CREATE TABLE `ipam_entries` (
+	`id` integer PRIMARY KEY AUTOINCREMENT NOT NULL,
+	`ip_address` text NOT NULL,
+	`label` text,
+	`vendor` text,
+	`location` text,
+	`notes` text,
+	`created_at` text DEFAULT (current_timestamp) NOT NULL,
+	`updated_at` text DEFAULT (current_timestamp) NOT NULL
+);
+--> statement-breakpoint
+CREATE UNIQUE INDEX `ipam_entries_ip_address_unique` ON `ipam_entries` (`ip_address`);--> statement-breakpoint
+CREATE TABLE `scheduled_tasks` (
+	`id` integer PRIMARY KEY AUTOINCREMENT NOT NULL,
+	`server_id` integer NOT NULL,
+	`schedule_type` text NOT NULL,
+	`origin` text DEFAULT 'agent' NOT NULL,
+	`name` text NOT NULL,
+	`command` text,
+	`schedule_expression` text,
+	`source` text,
+	`enabled` integer DEFAULT true NOT NULL,
+	`next_run_at` text,
+	`raw_metadata` text,
+	`is_stale` integer DEFAULT false NOT NULL,
+	`first_seen_at` text DEFAULT (current_timestamp) NOT NULL,
+	`last_seen_at` text DEFAULT (current_timestamp) NOT NULL,
+	FOREIGN KEY (`server_id`) REFERENCES `servers`(`id`) ON UPDATE no action ON DELETE cascade
+);
+--> statement-breakpoint
+CREATE TABLE `secrets` (
+	`id` integer PRIMARY KEY AUTOINCREMENT NOT NULL,
+	`name` text NOT NULL,
+	`type` text DEFAULT 'generic' NOT NULL,
+	`description` text,
+	`expiry_date` text NOT NULL,
+	`warn_days` integer DEFAULT 30 NOT NULL,
+	`notes` text,
+	`created_at` text DEFAULT (current_timestamp) NOT NULL,
+	`updated_at` text DEFAULT (current_timestamp) NOT NULL
+);
+--> statement-breakpoint
+CREATE TABLE `servers` (
+	`id` integer PRIMARY KEY AUTOINCREMENT NOT NULL,
+	`name` text NOT NULL,
+	`hostname` text,
+	`os_type` text DEFAULT 'linux' NOT NULL,
+	`description` text,
+	`api_token_hash` text NOT NULL,
+	`api_token_prefix` text NOT NULL,
+	`created_at` text DEFAULT (current_timestamp) NOT NULL,
+	`last_seen_at` text
+);
+--> statement-breakpoint
+CREATE TABLE `settings` (
+	`key` text PRIMARY KEY NOT NULL,
+	`value` text NOT NULL,
+	`updated_at` text DEFAULT (current_timestamp) NOT NULL
+);
+--> statement-breakpoint
+CREATE TABLE `users` (
+	`id` integer PRIMARY KEY AUTOINCREMENT NOT NULL,
+	`oidc_sub` text NOT NULL,
+	`email` text,
+	`name` text,
+	`role` text DEFAULT 'viewer' NOT NULL,
+	`created_at` text DEFAULT (current_timestamp) NOT NULL,
+	`last_login_at` text
+);
+--> statement-breakpoint
+CREATE UNIQUE INDEX `users_oidc_sub_unique` ON `users` (`oidc_sub`);