feat: socle BDD (tâche 1.9 Phase 1-2) + moteur APT (tâche 2 SJ-0→3) + WIP capabilities/auth/Rust

Checkpoint multi-chantiers (arbre vert : tsc 0 erreur, 70 tests, build OK).
- tâche 1.9 Phase 1 : schéma socle (machine_state/events/reports/raw_artifacts/
  hardware/metrics + colonnes étendues) + wiring refresh/execute. Migration 0002.
- tâche 1.9 Phase 2 : machine_credentials + machine_host_keys (non destructif,
  dual-read + backfill). Migration 0003. Fix séquence journal de migration.
- tâche 2 : SJ-0 (types étendus rétro-compatibles, réducteur Docker, resolveTemplate),
  SJ-1 (update-analyze enrichi), SJ-2 (apply + diff dpkg + timeout inactivité SSH),
  SJ-3 (reboot vérifié boot_id).
- WIP parallèle inclus : /api/capabilities, auth/apiTokens/apiClients, system metrics,
  scaffold app_rust, ajustements frontend.

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>

client/src/features/machines/AddMachineModal.tsx

@@ -1,5 +1,6 @@
 // client/src/features/machines/AddMachineModal.tsx
 import { useState } from "react";
+import { api } from "../../lib/api.js";
 
 interface Props { onClose: () => void; onCreated: () => void; }
 
@@ -12,11 +13,7 @@ export function AddMachineModal({ onClose, onCreated }: Props) {
   async function submit() {
     setBusy(true); setError(null);
     try {
-      const res = await fetch("/api/machines", {
-        method: "POST", headers: { "content-type": "application/json" },
-        body: JSON.stringify({ ...form, port: Number(form.port), sudoPassword: form.sudoPassword || null }),
-      });
-      if (!res.ok) throw new Error((await res.json()).error ?? "Échec");
+      await api.createMachine({ ...form, port: Number(form.port), sudoPassword: form.sudoPassword || null });
       onCreated(); onClose();
     } catch (e) { setError((e as Error).message); } finally { setBusy(false); }
   }