feat: sync pgpm modules from constructive-db

[pyramation]

Summary

Syncs the standalone workspace from constructive-db/pgpm-modules (source of truth), porting SQL sources (deploy/verify/revert), pgpm.plan entries, and the affected generated sql/*.sql bundles. Standalone adaptations are preserved: workspace:* deps, pgsql-test test imports (except metaschema-modules, which already uses constructive-test in both repos), and each module's existing frozen extension version (bundles regenerated in place — no version churn).

New module

• uuid — copied verbatim from db; adapted package.json (version → 0.32.1, @pgpm/verify → workspace:*, dropped gitHead). Added a single packages/uuid importer to pnpm-lock.yaml (mirrors base32) so pnpm install --frozen-lockfile passes; no other lockfile churn. Not added to the CI test matrix (it has no tests, matching db).

Module content synced

• metaschema-modules — new module tables: infra_config_module, infra_secrets_module, internal_secrets_module, webhook_module, integration_providers_module, db_preset_module; one_platform_scope constraints on the *_log_module/graph/events/db_usage tables; dropped config_secrets_module (superseded). Test + snapshot updated from db; sessions_module columns renamed sessions_table→sessions_table_name, session_credentials_table→session_credentials_table_name.
• metaschema-schema — metaschema_private.is_valid_step_up validator wired into the table change's requires.
• database-jobs — schedule_min_interval_seconds estimator; authenticated EXECUTE grant on add_scheduled_job for INVOKER trigger support.
• services, utils — source-tree sync (services revert tree; enforce_identity_providers_quota).

Notable non-obvious change

# packages/metaschema-modules/jest.config.js
-  testTimeout: 30000,
+  testTimeout: 60000,

The larger module set makes the information_schema.constraint_column_usage FK-introspection test straddle the old 30s limit (≈4s warm, ≈32s cold), so the timeout is bumped. Pure config; no assertion changes.

Testing

pnpm install --frozen-lockfile (pnpm 9, as CI) + pnpm test for every changed module — all green: utils, database-jobs, metaschema-schema, services, metaschema-modules (8/8, snapshots regenerated to include webhook_module, which db's own committed snapshot still lacks).

Link to Devin session: https://app.devin.ai/sessions/a118097bf58b4160938c3c8eadfaba62
Requested by: @pyramation

[devin-ai-integration]

🤖 Devin AI Engineer

I'll be helping with this pull request! Here's what you should know:

✅ I will automatically:

• Address comments on this PR. Add '(aside)' to your comment to have me ignore it.
• Look at CI failures and help fix them

Note: I can only respond to comments from users who have write access to this repository.

⚙️ Control Options:

• Disable automatic comment, CI, and merge conflict monitoring