feat: add Gitea CI workflows, production compose, and update all deps

- Add .gitea/workflows for building and pushing api, dashboard, and worker images to git.zias.be registry
- Add docker-compose.prod.yml using pre-built registry images (no build-from-source on server)
- Update docker-compose.yml infra images to latest (postgres 18.3, redis 8.6.2, clickhouse 26.3.2.3)
- Update self-hosting/docker-compose.template.yml image versions to match
- Bump Node.js to 22.22.2 in all three Dockerfiles
- Update pnpm to 10.33.0 and upgrade all safe npm dependencies
- Add buffer-equal-constant-time patch

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

packages/sdks/_info/package.json

@@ -9,9 +9,9 @@
     "react": "catalog:"
   },
   "devDependencies": {
-    "@types/react": "catalog:",
     "@openpanel/tsconfig": "workspace:*",
-    "prisma": "^5.1.1",
+    "@types/react": "catalog:",
+    "prisma": "^5.22.0",
     "typescript": "catalog:"
   }
 }

packages/sdks/astro/package.json

@@ -23,7 +23,7 @@
     "@openpanel/web": "workspace:1.3.0-local"
   },
   "devDependencies": {
-    "astro": "^5.7.7"
+    "astro": "^5.18.1"
   },
   "peerDependencies": {
     "astro": "^4.0.0 || ^5.0.0"

packages/sdks/express/package.json

@@ -10,17 +10,17 @@
     "typecheck": "tsc --noEmit"
   },
   "dependencies": {
-    "@openpanel/sdk": "workspace:1.3.0-local",
-    "@openpanel/common": "workspace:*"
+    "@openpanel/common": "workspace:*",
+    "@openpanel/sdk": "workspace:1.3.0-local"
   },
   "peerDependencies": {
     "express": "^4.17.0 || ^5.0.0"
   },
   "devDependencies": {
     "@openpanel/tsconfig": "workspace:*",
-    "@types/express": "^5.0.3",
+    "@types/express": "^5.0.6",
     "@types/request-ip": "^0.0.41",
-    "tsup": "^7.2.0",
+    "tsup": "^8.5.1",
     "typescript": "catalog:"
   }
 }

packages/sdks/nextjs/package.json

@@ -20,7 +20,7 @@
   "devDependencies": {
     "@openpanel/tsconfig": "workspace:*",
     "@types/react": "catalog:",
-    "tsup": "^7.2.0",
+    "tsup": "^8.5.1",
     "typescript": "catalog:"
   }
 }

packages/sdks/nuxt/package.json

@@ -31,12 +31,12 @@
     "nuxt": "^3.0.0 || ^4.0.0"
   },
   "devDependencies": {
-    "@nuxt/kit": "^3.0.0",
+    "@nuxt/kit": "^3.21.2",
     "@nuxt/module-builder": "^1.0.2",
     "@nuxt/types": "^2.18.1",
     "@openpanel/tsconfig": "workspace:*",
     "@types/node": "catalog:",
-    "@vue/runtime-core": "^3.5.25",
+    "@vue/runtime-core": "^3.5.31",
     "typescript": "catalog:",
     "unbuild": "^3.6.1"
   }

packages/sdks/react-native/package.json

@@ -15,7 +15,7 @@
   "devDependencies": {
     "@openpanel/tsconfig": "workspace:*",
     "@types/node": "catalog:",
-    "tsup": "^7.2.0",
+    "tsup": "^8.5.1",
     "typescript": "catalog:"
   },
   "peerDependencies": {

packages/sdks/sdk/package.json

@@ -9,12 +9,11 @@
     "build": "rm -rf dist && tsup",
     "typecheck": "tsc --noEmit"
   },
-  "dependencies": {},
   "devDependencies": {
     "@openpanel/tsconfig": "workspace:*",
     "@openpanel/validation": "workspace:*",
     "@types/node": "catalog:",
-    "tsup": "^7.2.0",
+    "tsup": "^8.5.1",
     "typescript": "catalog:"
   }
 }

packages/sdks/web/package.json

@@ -17,7 +17,7 @@
   "devDependencies": {
     "@openpanel/tsconfig": "workspace:*",
     "@types/node": "catalog:",
-    "tsup": "^7.2.0",
+    "tsup": "^8.5.1",
     "typescript": "catalog:"
   }
 }