feat(todo): the server on halkyon_base

Todo's server includes halkyon_base (ADR 0014), configured for Todo:
its basics say it serves `todo`, sign-in mails name Halkyon Todo, the
source is this repository, minimumAppBuild 1. Authentication through
the module (anonymous, GitHub, email codes, server-side sessions) in
place of the scaffold's email-and-password provider; the module's
pruning scheduled once however often the server starts. The scaffold's
greeting, its Flutter web hosting, cloud storage and Docker files go;
session logs are never persisted. Todo was never deployed, so its
migrations start again with one initial migration. The root's lints
apply, with the four constructor rules off as on Learn's server.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Signed-off-by: Tizian 「ティツィアーン」 <raisondetredev@pm.me>

apps/todo/halkyon_todo_server/config/development.yaml

@@ -41,8 +41,9 @@ database:
 
 maxRequestSize: 524288 # The maximum size of requests allowed in bytes
 
+# Session logs stay out of the database, for privacy, as Learn's (never re-enable).
 sessionLogs:
-  persistentEnabled: true
+  persistentEnabled: false
   consoleEnabled: true
   consoleLogFormat: text # Defaults to "json", options are "text" or "json"
 

apps/todo/halkyon_todo_server/config/generator.yaml

@@ -2,3 +2,8 @@ type: server
 
 client_package_path: ../halkyon_todo_client
 server_test_tools_path: test/integration/test_tools
+
+modules:
+  # What every Halkyon server has (ADR 0014): `client.modules.base` in the app.
+  halkyon_base:
+    nickname: base

apps/todo/halkyon_todo_server/config/production.yaml

@@ -41,9 +41,10 @@ database:
 
 maxRequestSize: 524288 # The maximum size of requests allowed in bytes
 
+# Session logs stay out of the database, for privacy, as Learn's (never re-enable).
 sessionLogs:
   consoleEnabled: false
-# persistentEnabled: true
+  persistentEnabled: false
 # consoleLogFormat: json # Defaults to "json", options are "text" or "json"
 
 #futureCall:

apps/todo/halkyon_todo_server/config/staging.yaml

@@ -45,8 +45,9 @@ database:
 
 maxRequestSize: 524288 # The maximum size of requests allowed in bytes
 
+# Session logs stay out of the database, for privacy, as Learn's (never re-enable).
 sessionLogs:
-# persistentEnabled: true
+  persistentEnabled: false
 # consoleEnabled: true
 # consoleLogFormat: json # Defaults to "json", options are "text" or "json"
 

apps/todo/halkyon_todo_server/config/test.yaml

@@ -38,8 +38,9 @@ database:
   #maxConnectionCount: 10 # Defaults to 10, a negative or null value removes the limit
 
 
+# Session logs stay out of the database, for privacy, as Learn's (never re-enable).
 sessionLogs:
-  persistentEnabled: true
+  persistentEnabled: false
   consoleEnabled: true
 # consoleLogFormat: json # Defaults to "json", options are "text" or "json"