Assemble QMS app + SQLite refactor + Unraid single-container deploy

Reconstruct the full app from init-source overlays (base + fix-1..6 +
update-1..3, last-wins) at the repo root, complete the missing pieces so it
builds and runs, and stage the Unraid deployment.

App completion:
- types/index.ts: former Prisma enums as string-literal unions + AppUser
- pages/_app.tsx + styles/globals.css (mount AppProvider/ToastProvider)
- API routes: auth/login, auth/me, users, submissions (+REVIEW_READY notify),
  forms (list/create), notifications
- scripts/create-admin.js: idempotent first-admin bootstrap
- 14 unbuilt nav targets stubbed via ComingSoon placeholder

SQLite refactor (single-container, no external DB):
- schema provider -> sqlite; enums -> String; Json -> String;
  FormField.options String[] -> JSON-encoded String
- lib/forms.ts (de)serialises options at the DB boundary
- drop mode:"insensitive" (unsupported on SQLite)
- enum imports repointed from @prisma/client to @/types

Deploy:
- multi-stage Dockerfile (next build -> prod runner), docker-entrypoint.sh
  (prisma db push -> create-admin -> next start), .dockerignore
- docker-compose.yml: br0 10.2.0.x, /mnt/user/appdata/qms -> /data volume
- README rewritten for the Unraid/Gitea Actions flow; .env scrubbed of the
  live Supabase credential; vercel.json removed

Verified: next build clean (41 routes); live SQLite round-trip of
login/session, form options array, and submission -> REVIEW_READY.

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

docker-compose.yml

@@ -0,0 +1,36 @@
+# V11 Enterprise QMS — Unraid deployment
+# Single container, SQLite persisted to the Unraid appdata share, on the br0 LAN.
+#
+#   1. Pick a free IP in 10.2.0.0/24 and set it below (ipv4_address) + NEXT_PUBLIC_APP_URL.
+#   2. Set ADMIN_* and (optionally) SMTP_* below.
+#   3. docker compose up -d   (or install via the Unraid Docker GUI with the same values)
+
+services:
+  qms:
+    image: registry.alwisp.com/jason/qms:latest
+    container_name: qms
+    restart: unless-stopped
+    environment:
+      # SQLite file inside the mapped volume — do not change the path
+      DATABASE_URL: "file:/data/qms.db"
+      # LAN URL the app is reached at (used in notification email links)
+      NEXT_PUBLIC_APP_URL: "http://10.2.0.30:3000"
+      # First-run admin (created only if no admin exists; change the password after first login)
+      ADMIN_EMAIL: "admin@yourcompany.com"
+      ADMIN_PASSWORD: "change-me-on-first-login"
+      ADMIN_NAME: "Administrator"
+      # Optional SMTP — leave unset to disable outbound email (notifications still appear in-app)
+      # SMTP_HOST: "smtp.resend.com"
+      # SMTP_PORT: "587"
+      # SMTP_USER: "resend"
+      # SMTP_PASS: "re_xxxxxxxx"
+      # EMAIL_FROM: "qms@yourcompany.com"
+    volumes:
+      - /mnt/user/appdata/qms:/data
+    networks:
+      br0:
+        ipv4_address: 10.2.0.30   # <-- set to a free IP on your LAN
+
+networks:
+  br0:
+    external: true