Expand Copilot Opportunity discovery

[jmgasper]

Summary

• move copilot filtering, sorting, and pagination into the database
• add current-user application filters and enrichment with optional authentication
• fix both copilot opportunity detail aliases
• make public list/detail responses allow-list request JSON and assign trusted computed fields afterward
• never expose project member IDs on public opportunity routes
• report canApplyAsCopilot=true only for numeric authenticated human copilot users on active opportunities with no existing application or project membership
• publish a Projects Prisma client package and expose bounded PostgreSQL connection/query/statement timeout settings

Validation

• pnpm test --runInBand src/api/copilot/copilot-opportunity.service.spec.ts (13 tests passed)
• pnpm test --runInBand src/shared/global/projects-prisma-client.spec.ts (4 tests passed)
• pnpm lint
• pnpm build
• prior copilot e2e run: 21 tests passed
• repository-wide run: 49 of 60 suites and 379 of 394 tests passed; the 11 failing suites / 15 tests are pre-existing metadata event-mock and JWT-fixture failures unrelated to this change

Latest head: 2c4be93eec1ce7192238ae8179d8a52374ae1924