fix(WP-0014): pre-flight compilation fixes, Tailwind pipeline, and admin seed

A2 — Compilation fixes:
- Remove inline FK constraints from Schema.sql; IHP schema compiler cannot
  parse them. Add 1744329600-restore-fk-constraints.sql migration to restore
  referential integrity at the DB level.
- Rename `#label` → `#label_` throughout to avoid clash with Haskell built-in.
- Fix `hub.id == hid` UUID comparisons to use `toUUID hub.id`.
- Replace non-existent `setStatus`/`respondJson` calls with
  `renderJsonWithStatusCode` throughout Api controllers.
- Fix qualified package import for `cryptohash-sha256` in Auth.hs.
- Add `CanSelect (Text, Text)` instance in Helper.View.
- Refactor HSX inline lambdas to named helper functions in 100+ views
  (GHC cannot infer types for anonymous functions inside quasi-quoted HSX).
- Fix missing imports (IHP.QueryBuilder, IHP.Fetch, Web.Routes, Only, etc.)
  across helpers and controllers.
- Remove duplicate `diffUTCTime` definition in BottleneckDetector.
- Change `createEventForHub` return type from `IO ResponseReceived` to `IO ()`.
- Seed type-registry vocabulary via 1744502400-seed-type-registries.sql
  (moved from Schema.sql where IHP does not execute INSERT statements).

A3 — Tailwind build pipeline:
- Add `tailwindcss` to flake.nix native packages.
- Uncomment `tailwind.exec` process in devenv shell config.
- Add tailwind/tailwind.config.js (scans Web/View/**/*.hs).
- Add tailwind/app.css with @tailwind directives.

A4 — Admin user seed:
- Add 1744416000-seed-admin-user.sql: inserts admin@inter-hub.local
  with bcrypt-hashed password admin1234! (cost 10).
- Add .env.example documenting all required environment variables
  and default admin credentials.

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

Web/Controller/Api/V2/Auth.hs

@@ -7,9 +7,9 @@ import Generated.Types
 import Data.Aeson (object, (.=))
 import qualified Data.Text as T
 import qualified Data.Text.Encoding as TE
-import qualified Crypto.Hash.SHA256 as SHA256  -- cryptohash-sha256: hash :: ByteString -> ByteString
+import qualified "cryptohash-sha256" Crypto.Hash.SHA256 as SHA256
 import qualified Data.ByteString.Base16 as Base16
-import Network.Wai (requestHeaders)
+import Network.Wai (requestHeaders, responseLBS)
 
 -- | Extract Bearer token from Authorization header and validate it
 -- against the api_keys table. Returns the ApiConsumer on success,

Web/Controller/Api/V2/OpenApi.hs

@@ -18,6 +18,7 @@ import qualified Data.ByteString.Lazy as LBS
 import Application.Helper.TypeRegistry
     ( activeWidgetTypes, activeEventTypes, activeAnnotationCategories )
 import Network.HTTP.Types (status200)
+import Network.Wai (responseLBS)
 
 instance Controller ApiV2OpenApiController where
 

Web/Controller/Api/V2/Registries.hs

@@ -16,28 +16,28 @@ instance Controller ApiV2RegistriesController where
     action ApiV2ListWidgetTypesAction = do
         types <- query @WidgetTypeRegistry
             |> filterWhere (#status, "active")
-            |> orderByAsc #label
+            |> orderByAsc #label_
             |> fetch
         renderJson $ map wtToJson types
 
     action ApiV2ListEventTypesAction = do
         types <- query @EventTypeRegistry
             |> filterWhere (#status, "active")
-            |> orderByAsc #label
+            |> orderByAsc #label_
             |> fetch
         renderJson $ map etToJson types
 
     action ApiV2ListAnnotationCategoriesAction = do
         cats <- query @AnnotationCategoryRegistry
             |> filterWhere (#status, "active")
-            |> orderByAsc #label
+            |> orderByAsc #label_
             |> fetch
         renderJson $ map acToJson cats
 
 wtToJson :: WidgetTypeRegistry -> Value
 wtToJson r = object
     [ "name"       .= r.name
-    , "label"      .= r.label
+    , "label"      .= r.label_
     , "description" .= r.description
     , "ownerHubId" .= r.ownerHubId
     , "status"     .= r.status
@@ -46,7 +46,7 @@ wtToJson r = object
 etToJson :: EventTypeRegistry -> Value
 etToJson r = object
     [ "name"        .= r.name
-    , "label"       .= r.label
+    , "label"       .= r.label_
     , "description" .= r.description
     , "ownerHubId"  .= r.ownerHubId
     , "status"      .= r.status
@@ -55,7 +55,7 @@ etToJson r = object
 acToJson :: AnnotationCategoryRegistry -> Value
 acToJson r = object
     [ "name"        .= r.name
-    , "label"       .= r.label
+    , "label"       .= r.label_
     , "description" .= r.description
     , "ownerHubId"  .= r.ownerHubId
     , "status"      .= r.status

Web/Controller/Api/V2/Sdk.hs

@@ -12,6 +12,7 @@ import qualified Data.Text as T
 import qualified Data.Text.Encoding as TE
 import qualified Data.ByteString.Lazy as LBS
 import Network.HTTP.Types (status200)
+import Network.Wai (responseLBS)
 import Application.Helper.TypeRegistry
     ( activeWidgetTypes, activeEventTypes, activeAnnotationCategories )