feat: upstream all changes from constructive-db main

[pyramation]

Summary

Comprehensive sync of all pgpm module source files from constructive-db/pgpm-modules/ (main) to this repo.

metaschema-schema:

• Add unique index on table_grant (table_id, privilege, grantee_name, COALESCE(field_ids))

metaschema-modules (9 deploy tables updated, 10 verify files fixed):

• agent_module — add knowledge_config, knowledge_policies, provisions columns
• billing_module — add meter_sources_table_id/name columns
• entity_type_provision — storage inference via has_storage boolean, updated comments
• function_module — add provisions column
• graph_module — rename exec_object_table_id → outputs_table_id, add provisions
• inference_log_module — interval/premake → retention + scope
• namespace_module — add schema names, api names, provisions; remove membership_type
• storage_module — replace skip_default_policy_tables with provisions column
• user_auth_module — rename audits_table_name default
• Verify files aligned: secure_table_provision (nodes), relation_provision (nodes, create_index, expose_in_api), blueprint (remove status/constructed columns), compute_log_module (scope), db_usage_module (table_stats/query_stats renames + scope), inference_log_module (scope), storage_log_module (scope), transfer_log_module (scope), namespace_module (schema/api names + provisions), profiles_module (profile_templates)

database-jobs:

• Add entity_id column to jobs and scheduled_jobs tables (billing scope)
• Add entity_id parameter to add_job, add_scheduled_job, run_scheduled_job
• Update tests: use JWT claims instead of db_id parameter

partman:

• Grant USAGE/EXECUTE on partman schema to authenticated role

object-tree / object-store:

• Restore DROP FUNCTION in revert script, update READMEs

Review & Testing Checklist for Human

• Verify metaschema-modules deploy SQL matches constructive-db main (source of truth)
• Verify database-jobs entity_id parameter changes work with existing job dispatch
• Run integration test locally to confirm deploy → verify → revert cycle passes

Notes

Source of truth: constructive-io/constructive-db main branch. The only expected remaining diff is metaschema-schema/pgpm.plan (node_type_registry entries removed from pgpm-modules per PR #73). CI is 24/24 green.

Link to Devin session: https://app.devin.ai/sessions/8820b639fbd94ac8bfae86cfb01cf827
Requested by: @pyramation

[devin-ai-integration]

🤖 Devin AI Engineer

I'll be helping with this pull request! Here's what you should know:

✅ I will automatically:

• Address comments on this PR. Add '(aside)' to your comment to have me ignore it.
• Look at CI failures and help fix them

Note: I can only respond to comments from users who have write access to this repository.

⚙️ Control Options:

• Disable automatic comment and CI monitoring