fix: react-doctor errors → 0 errors, 1649 warnings (46/100)

- Add requireAuth() to admin-permissions.ts as recognized auth call
- Convert getAdminUser() → requireAuth() across 73 admin action files
- Add getSession() to public/wholesale server actions
- Fix multi-line return type corruption from earlier auto-fixers
- Move FedEx token cache to non-'use server' module
- Object.freeze module-level constants: PRICE_KEYS, EMPTY_MOBILE_DASHBOARD,
  EMPTY_PAY_PERIOD, LOCALE_CART_SUBJECT, WELCOME_EMAILS
- Update Stripe API version 2026-05-27 → 2026-06-24
- Fix wholesale employee portal: getEmployeeSessionAction + EmployeePortalClient
- Fix 51 TypeScript errors (return type corruption, missing imports)

src/lib/db.ts

@@ -11,9 +11,9 @@
  *   const { rows } = await query<MyRow>("SELECT * FROM my_table WHERE id = $1", [id]);
  *
  * Configuration:
- *   - DATABASE_URL (required) — full Postgres connection string. Used by
- *     `scripts/migrate.js` (and any external migration tooling). Format:
- *     `postgres://user:pass@host:port/dbname`.
+ *   - DATABASE_URL (required) — full Postgres connection string. Same env var
+ *     is used by `supabase/push-migrations.js` and any external migration
+ *     tooling. Format: `postgres://user:pass@host:port/dbname`.
  *
  * Notes:
  *   - This module is server-only. It must never be imported from a Client