tooling: add ESLint 9 flat config and a typecheck script

- eslint.config.mjs: flat config built on eslint-config-next's flat array
  (core-web-vitals + typescript + Next plugin), with build/generated artifacts
  ignored and the aggressive react-hooks v6 React-Compiler rules downgraded to
  warnings so `pnpm run lint` passes clean (0 errors, 88 warnings of burn-down
  debt) instead of failing. Previously `eslint .` failed outright — no config
  and no eslint binary were installed.
- Install eslint, @eslint/js, eslint-config-next, typescript-eslint, globals as
  devDeps (dev-only; prod Docker build is unaffected).
- package.json: add `typecheck` (tsc --noEmit) and `test:run` scripts.
- app/not-found.tsx: escape apostrophes (react/no-unescaped-entities).

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

app/not-found.tsx

@@ -16,7 +16,7 @@ export default function NotFound() {
         </h2>
         
         <p className="text-muted-foreground mb-8">
-          The page you're looking for doesn't exist or has been moved.
+          The page you&rsquo;re looking for doesn&rsquo;t exist or has been moved.
         </p>
 
         <div className="flex flex-col sm:flex-row gap-3 justify-center">

eslint.config.mjs

@@ -0,0 +1,59 @@
+// ESLint 9 flat config. `eslint-config-next` ships a flat-config array
+// (core-web-vitals + typescript rules + the Next plugin), which we spread and
+// then tune. Run with `pnpm run lint`.
+import next from 'eslint-config-next'
+import tseslint from 'typescript-eslint'
+
+export default [
+  {
+    // Build output, deps, generated artifacts, and non-source assets. Keeping
+    // the generated Supabase types out of lint is deliberate: it is a codegen
+    // artifact (see the banner in types/database.ts), not hand-authored source.
+    ignores: [
+      '.next/**',
+      'node_modules/**',
+      'dist/**',
+      'build/**',
+      'coverage/**',
+      'next-env.d.ts',
+      'types/database.ts',
+      'public/**',
+      'scripts/**',
+      'e2e/**',
+      'playwright-report/**',
+      'test-results/**',
+    ],
+  },
+
+  ...next,
+
+  {
+    // Register the TS plugin in the same object the rule overrides live in
+    // (flat-config requirement) so these tunings apply on top of ...next.
+    plugins: { '@typescript-eslint': tseslint.plugin },
+    rules: {
+      // Unused vars are worth surfacing but should not fail CI on a leading-
+      // underscore throwaway (destructured rest, intentionally-ignored args).
+      '@typescript-eslint/no-unused-vars': [
+        'warn',
+        { argsIgnorePattern: '^_', varsIgnorePattern: '^_', ignoreRestSiblings: true },
+      ],
+      // `any` is discouraged but still present in a few typed-boundary spots
+      // (documented Supabase client seams). Warn so it is visible without
+      // blocking, and drive the count down over time rather than all at once.
+      '@typescript-eslint/no-explicit-any': 'warn',
+
+      // eslint-config-next@16 turns on eslint-plugin-react-hooks v6's new
+      // React-Compiler rule set as errors. They surface genuine modernization
+      // debt (e.g. `static-components` catches the members-client field-in-
+      // render remount bug, fixed during the members refactor), but most flag
+      // patterns that are correct today (data-loading setState in an effect).
+      // Keep them as visible warnings rather than CI-blocking errors and burn
+      // them down incrementally.
+      'react-hooks/set-state-in-effect': 'warn',
+      'react-hooks/static-components': 'warn',
+      'react-hooks/immutability': 'warn',
+      'react-hooks/purity': 'warn',
+    },
+  },
+]

package.json

@@ -7,7 +7,9 @@
     "build": "next build",
     "start": "next start",
     "lint": "eslint .",
+    "typecheck": "tsc --noEmit",
     "test": "vitest",
+    "test:run": "vitest run",
     "test:ui": "vitest --ui",
     "test:integration": "vitest run --config vitest.integration.config.ts",
     "test:e2e": "playwright test",
@@ -71,6 +73,7 @@
     "zod": "^3.24.1"
   },
   "devDependencies": {
+    "@eslint/js": "^9.39.5",
     "@playwright/test": "^1.40.0",
     "@tailwindcss/postcss": "^4.2.0",
     "@testing-library/jest-dom": "^6.1.5",
@@ -80,12 +83,16 @@
     "@types/react-dom": "19.2.3",
     "@vitejs/plugin-react": "^4.2.1",
     "@vitest/ui": "^1.0.4",
+    "eslint": "^9.39.5",
+    "eslint-config-next": "16.1.6",
+    "globals": "^15.15.0",
     "jsdom": "^23.0.1",
     "postcss": "^8.5",
     "shadcn": "^4.0.0",
     "tailwindcss": "^4.2.0",
     "tw-animate-css": "1.3.3",
     "typescript": "5.7.3",
+    "typescript-eslint": "^8.65.0",
     "vitest": "^1.0.4"
   }
 }