fix(iam): 修复 TS 编译错误、ESM 依赖注入与身份头读取

P1 端到端验证中发现 IAM 服务存在 14 个 TS 编译错误与运行时 DI 失败：

- 移除 typeorm/ioredis/kafkajs 依赖（IAM 用 Drizzle）
- health.controller.ts 改用 db.execute(sql SELECT 1) 校验连接
- lifecycle.service.ts 简化为只关闭 Drizzle 连接池
- Drizzle API 修正：r.roles -> r.iam_roles，.in() -> inArray()
- ESM 模式下 DI 必须显式 @Inject(IamRepository)（参考 classes 黄金模板）
- iam.controller.ts 直接读 req.headers[x-user-id]，不依赖未注册的 AuthMiddleware
- health.module.ts 补 .js 后缀
- package.json 补 @types/express

验证：register -> JWT -> Gateway /iam/me 200 -> /classes CRUD 200

services/iam/src/shared/health/health.controller.ts

@@ -1,7 +1,8 @@
-import { Controller, Get, HttpException, HttpStatus } from '@nestjs/common';
-import { DataSource } from 'typeorm';
+import { Controller, Get, HttpException, HttpStatus } from "@nestjs/common";
+import { sql } from "drizzle-orm";
+import { getDb } from "../../config/database.js";
 
-const SERVICE_NAME = 'iam';
+const SERVICE_NAME = "iam";
 
 /**
  * 健康检查端点。
@@ -14,33 +15,37 @@ const SERVICE_NAME = 'iam';
  */
 @Controller()
 export class HealthController {
-  constructor(private readonly dataSource: DataSource) {}
-
-  @Get('healthz')
+  @Get("healthz")
   liveness(): { status: string; service: string; timestamp: string } {
     return {
-      status: 'ok',
+      status: "ok",
       service: SERVICE_NAME,
       timestamp: new Date().toISOString(),
     };
   }
 
-  @Get('readyz')
-  async readiness(): Promise<{ status: string; service: string; timestamp: string }> {
+  @Get("readyz")
+  async readiness(): Promise<{
+    status: string;
+    service: string;
+    timestamp: string;
+  }> {
     try {
-      await this.dataSource.query('SELECT 1');
+      const db = getDb();
+      await db.execute(sql`SELECT 1`);
       return {
-        status: 'ok',
+        status: "ok",
         service: SERVICE_NAME,
         timestamp: new Date().toISOString(),
       };
     } catch (error) {
       throw new HttpException(
         {
-          status: 'error',
+          status: "error",
           service: SERVICE_NAME,
           timestamp: new Date().toISOString(),
-          error: error instanceof Error ? error.message : 'database unreachable',
+          error:
+            error instanceof Error ? error.message : "database unreachable",
         },
         HttpStatus.SERVICE_UNAVAILABLE,
       );