Initial commit: Port Nimara CRM (Layers 0-4)

Full CRM rebuild with Next.js 15, TypeScript, Tailwind, Drizzle ORM,
PostgreSQL, Redis, BullMQ, MinIO, and Socket.io. Includes 461 source
files covering clients, berths, interests/pipeline, documents/EOI,
expenses/invoices, email, notifications, dashboard, admin, and
client portal. CI/CD via Gitea Actions with Docker builds.

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

src/lib/services/storage.ts

@@ -0,0 +1,23 @@
+import { buildStoragePath } from '@/lib/minio';
+import { MIME_TO_EXT } from '@/lib/constants/file-validation';
+
+export function generateStorageKey(
+  portSlug: string,
+  entity: string,
+  entityId: string,
+  mimeType: string,
+): string {
+  const fileId = crypto.randomUUID();
+  const extension = MIME_TO_EXT[mimeType] ?? 'bin';
+  return buildStoragePath(portSlug, entity, entityId, fileId, extension);
+}
+
+export function sanitizeFilename(name: string): string {
+  return name
+    .replace(/[/\\:]/g, '')       // strip path chars
+    .replace(/\x00/g, '')          // strip null bytes
+    // eslint-disable-next-line no-control-regex
+    .replace(/[\x01-\x1f\x7f]/g, '') // strip control chars
+    .trim()
+    .slice(0, 255);
+}