Assemble QMS app + SQLite refactor + Unraid single-container deploy

Reconstruct the full app from init-source overlays (base + fix-1..6 +
update-1..3, last-wins) at the repo root, complete the missing pieces so it
builds and runs, and stage the Unraid deployment.

App completion:
- types/index.ts: former Prisma enums as string-literal unions + AppUser
- pages/_app.tsx + styles/globals.css (mount AppProvider/ToastProvider)
- API routes: auth/login, auth/me, users, submissions (+REVIEW_READY notify),
  forms (list/create), notifications
- scripts/create-admin.js: idempotent first-admin bootstrap
- 14 unbuilt nav targets stubbed via ComingSoon placeholder

SQLite refactor (single-container, no external DB):
- schema provider -> sqlite; enums -> String; Json -> String;
  FormField.options String[] -> JSON-encoded String
- lib/forms.ts (de)serialises options at the DB boundary
- drop mode:"insensitive" (unsupported on SQLite)
- enum imports repointed from @prisma/client to @/types

Deploy:
- multi-stage Dockerfile (next build -> prod runner), docker-entrypoint.sh
  (prisma db push -> create-admin -> next start), .dockerignore
- docker-compose.yml: br0 10.2.0.x, /mnt/user/appdata/qms -> /data volume
- README rewritten for the Unraid/Gitea Actions flow; .env scrubbed of the
  live Supabase credential; vercel.json removed

Verified: next build clean (41 routes); live SQLite round-trip of
login/session, form options array, and submission -> REVIEW_READY.

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

pages/api/submissions/index.ts

@@ -0,0 +1,39 @@
+import type { NextApiRequest, NextApiResponse } from 'next'
+import { prisma } from '@/lib/prisma'
+import { requireAuth, logAction } from '@/lib/auth'
+import { notifyFormReviewReady } from '@/lib/email'
+
+export default async function handler(req: NextApiRequest, res: NextApiResponse) {
+  const user = await requireAuth(req, res)
+  if (!user) return
+
+  if (req.method !== 'POST') return res.status(405).end()
+
+  const { formId, data } = req.body || {}
+  if (!formId || data === undefined) {
+    return res.status(400).json({ error: 'formId and data are required' })
+  }
+
+  const form = await prisma.buildForm.findUnique({ where: { id: formId } })
+  if (!form) return res.status(404).json({ error: 'Form not found' })
+  if (form.status !== 'ACTIVE') return res.status(400).json({ error: 'Form is not accepting submissions' })
+
+  await prisma.formSubmission.create({
+    data: { formId, submittedBy: user.id, data: JSON.stringify(data) },
+  })
+
+  const submissionCount = await prisma.formSubmission.count({ where: { formId } })
+
+  await logAction(user.id, 'CREATE', 'FormSubmission', formId, null, { submissionCount })
+
+  // First time the target is reached: flip to REVIEW_READY and notify admins.
+  if (submissionCount === form.minSubmissions) {
+    await prisma.buildForm.update({ where: { id: formId }, data: { status: 'REVIEW_READY' } })
+    const admins = await prisma.user.findMany({ where: { role: 'ADMIN', active: true } })
+    for (const admin of admins) {
+      await notifyFormReviewReady(form.name, submissionCount, admin.email, admin.id)
+    }
+  }
+
+  return res.status(201).json({ submissionCount })
+}