Canary: validate cached collections and bulk SQLite writes

[vladimirperovic]

Public CI canary for the shared storage refactor intended for Noema Private.

Changes are limited to shared storage internals:

• cache decrypted collection records after startup while keeping encrypted SQLite authoritative
• return structured clones to prevent accidental cache mutation
• add transactional bulk delete/upsert helpers
• use PRAGMA temp_store = MEMORY

This PR exists primarily to exercise the public repository's free GitHub Actions matrix (Node 22/24, project checks and smoke tests) before the same shared core changes are considered validated for the private repository.