refactor(services): centralize AuditMeta + transactional setEntityTags helper

The same `interface AuditMeta { userId; portId; ipAddress; userAgent }`
was duplicated in 26 service files. Move the canonical definition into
`@/lib/audit` next to the related types and update every service to
import it. `ServiceAuditMeta` (the alias used in invoices.ts and
expenses.ts) collapses into the same name.

Tag CRUD across clients/companies/yachts/interests/berths followed an
identical wipe-then-rewrite recipe with two latent issues: the delete
and insert weren't wrapped in a transaction (a partial failure left
the entity with zero tags) and the audit-log payload shape diverged
(`newValue: { tagIds }` for clients/yachts/companies but
`metadata: { type: 'tags_updated', tagIds }` for interests/berths).

Extract `setEntityTags` in `entity-tags.helper.ts` that performs the
delete+insert inside a single transaction, normalizes the audit payload
to `newValue: { tagIds }`, and dispatches the per-entity socket event
through a switch so `ServerToClientEvents` typing stays intact.

The five `setXTags(...)` service functions now do parent-row tenant
verification and delegate the join-table work + side effects.

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>

src/lib/services/berth-rules-engine.ts

@@ -4,7 +4,7 @@ import { db } from '@/lib/db';
 import { interests } from '@/lib/db/schema/interests';
 import { berths } from '@/lib/db/schema/berths';
 import { systemSettings } from '@/lib/db/schema/system';
-import { createAuditLog } from '@/lib/audit';
+import { createAuditLog, type AuditMeta } from '@/lib/audit';
 import { emitToRoom } from '@/lib/socket/server';
 
 // ─── Types ────────────────────────────────────────────────────────────────────
@@ -31,13 +31,6 @@ interface RuleConfig {
   targetStatus: string;
 }
 
-interface AuditMeta {
-  userId: string;
-  portId: string;
-  ipAddress: string;
-  userAgent: string;
-}
-
 // ─── Defaults ────────────────────────────────────────────────────────────────
 
 const DEFAULT_RULES: Record<BerthRuleTrigger, RuleConfig> = {
@@ -52,14 +45,9 @@ const DEFAULT_RULES: Record<BerthRuleTrigger, RuleConfig> = {
 
 // ─── Config ───────────────────────────────────────────────────────────────────
 
-async function getRulesConfig(
-  portId: string,
-): Promise<Record<BerthRuleTrigger, RuleConfig>> {
+async function getRulesConfig(portId: string): Promise<Record<BerthRuleTrigger, RuleConfig>> {
   const setting = await db.query.systemSettings.findFirst({
-    where: and(
-      eq(systemSettings.key, 'berth_rules'),
-      eq(systemSettings.portId, portId),
-    ),
+    where: and(eq(systemSettings.key, 'berth_rules'), eq(systemSettings.portId, portId)),
   });
 
   if (!setting?.value) {