refactor(builder): move growth, comment automation, media library and workspace data access into business

[realcodesiman]

Summary

• Removes every direct db.* call from reflinks, QR codes, magic links, spreadsheets, fb/ig comment and ig story automations, the media library, the presigned-upload route, workspace members, invitations, error logs, audit logs and the session auth helper, per .agents/rules/data-access.md.
• One of seven parallel scope PRs following feat(contacts): cover full public API for MCP, move logic into business services #1093 (contacts); all are based on main and only append to the shared barrels.

Changes

• New repositories: reflink, media-library-folder, media-library-file (the last also exists on feat(contacts): cover full public API for MCP, move logic into business services #1093; keep one copy when merging). New services: magic-link, media-library, invitation; listErrorLogs and listAuditLogs query functions; methods appended to reflink, qr-code, spreadsheet, fb-comment-automation, ig-story-automation, workspace-member, user services and the contact-inbox/file repositories.
• apps/builder/src/lib/auth/utils.ts: the membership read now goes through workspaceMemberService.listByUserIdUncached (the uncached variant, so the workspace auth gate keeps its immediate-revocation behavior). Nothing else in that file changes.
• app/r/[workspaceId]/[name]/route.ts (public): only the two lookups are swapped; every response branch and the unattributed-click warn log are unchanged.
• validationException added to packages/business/src/errors.ts in the same plain-factory/400 form as feat(contacts): cover full public API for MCP, move logic into business services #1093.
• Dead features/users/queries deleted (zero callers).

Notes for reviewers

• Behavior change: getFbComment/getIgComment/getIgStory now throw notFoundException (404) instead of a bare Error (500); same messages, and the only caller swallows the error.
• The builder-level media-library-mutations.test.ts mocks the service inline; the real service is covered by packages/business/__tests__/media-library.service.test.ts.
• Out of scope (still use db): the sibling update-*/delete-* actions in these features; listed in the plan as follow-ups.

Test plan

• pnpm --filter @chatbotx.io/database check-types && test
• pnpm --filter @chatbotx.io/business check-types && test (only the pre-existing ads-conversion-rule.service.test.ts failures remain, also red on main)
• pnpm --filter builder check-types && test
• pnpm lint
• Manual: duplicate-name create → inline field error; /r/<ws>/<name> with and without ?code= → 302; media-library upload/move/favourite/delete folder; change a member role; accept an invitation