chore(infra): rename compose stack to boringstack-infra + harden pre-…

[agjs]

…push DB lifecycle

Rename the stale ai-starter-infra / ai-starter-traefik compose names to boringstack-* across compose, promtail, docs, and preflight scripts so the stack matches the product. Simplify rename-project.sh — the bare boringstack → <project> rule now covers the stack name, dropping the redundant (and traefik-incomplete) ai-starter-infra special case.

Fix the pre-push DB-wipe that caused spurious "audit.audit_log does not exist" failures on cold pushes:

• Fix A (root cause): run STACK=smoke under its own compose project (boringstack-smoke) so the smoke gate's down -v can only drop smoke's own volumes, never the dev/test Postgres the api gate uses.
• Fix C (defense-in-depth): the api pre-push gate now always runs an idempotent db:migrate — a reachable :5432 doesn't guarantee a migrated schema if a sibling stack wiped the volume.

Summary

Test plan

• bun run check (or bun run check:full for the cross-app pass) from the repo root
• Stack smoke if compose/infra touched: cd infra/compose/compose && ./dev.sh up

App merge bars

Area	Command
API	cd apps/api && bun run validate
UI	cd apps/ui && bun run validate
Docs	cd apps/docs && bun run build:ci
Repo drift	bun run check (from repo root)

Conventions

• No any, no blind as, no !
• New env vars in schema + .env.example (+ SECURITY.md when relevant)
• Tests updated for changed behavior

Screenshots