feat(gdpr): staff-triggered client-data export bundle (Article 15)

Adds a full GDPR Article 15 (right of access) workflow. Staff trigger
an export from the client detail; a BullMQ worker assembles every row
keyed to that client (profile, contacts, addresses, notes, tags,
yachts, company memberships, interests, reservations, invoices,
documents, last 500 audit events) into JSON + a self-contained HTML
report, ZIPs them, uploads to MinIO, and optionally emails the client
a 7-day signed download link.

- New table gdpr_exports tracks lifecycle (pending → building → ready
  → sent / failed) with a 30-day cleanup target
- Bundle builder (gdpr-bundle-builder.ts) — pure read-side, tenant-
  scoped, with HTML escaping to block injection from rogue field values
- Worker hook in export queue dispatches on job name 'gdpr-export'
- New audit actions: 'request_gdpr_export', 'send_gdpr_export'
- API: POST/GET /api/v1/clients/:id/gdpr-export (admin-gated, exports
  rate-limit, Article-15 audit on POST); GET /:exportId returns a
  fresh signed URL
- UI: <GdprExportButton> dialog on client detail header — admin-only,
  shows recent exports, supports email-to-client + override recipient,
  polls every 5s while open
- Validation: refuses email-to-client when no primary email + no
  override (rather than silently dropping the send)

Tests: 778/778 vitest (was 771) — +7 covering builder happy path,
HTML escaping, tenant isolation, empty client, request-flow validation,
and audit / queue interaction.

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>

src/lib/queue/workers/export.ts

@@ -8,10 +8,22 @@ export const exportWorker = new Worker(
   'export',
   async (job: Job) => {
     logger.info({ jobId: job.id, jobName: job.name }, 'Processing export job');
-    // TODO(L2): implement export job handlers
-    //   - CSV data export
-    //   - PDF export
-    //   - Parent company report export
+    switch (job.name) {
+      case 'gdpr-export': {
+        const data = job.data as {
+          exportId: string;
+          portId: string;
+          clientId: string;
+          emailToClient: boolean;
+          emailOverride: string | null;
+        };
+        const { processGdprExportJob } = await import('@/lib/services/gdpr-export.service');
+        await processGdprExportJob(data);
+        break;
+      }
+      default:
+        logger.warn({ jobName: job.name }, 'Unknown export job');
+    }
   },
   {
     connection: { url: process.env.REDIS_URL! } as ConnectionOptions,