refactor: fix all P0/P1/P2 bugs and architecture issues

Bug fixes (from bugs/ directory):

- Fix cross-module DB queries in 9 modules (homework, grades, parent, diagnostic, elective, proctoring, notifications, scheduling, classes) by routing through data-access functions

- Fix shared/lib <-> auth circular dependency via new session.ts module

- Fix divide-by-zero guard in grades data-access

- Fix audit export data truncation (paginated fetch for full datasets)

- Fix missing transactions in homework grading and elective lottery

- Fix missing revalidatePath in course-plans actions

- Fix frontend permission checks using requirePermission instead of requireAuth

- Fix dashboard role routing using session.user.roles

- Fix student auth pattern (migrate getDemoStudentUser to users module)

- Fix ActionState return type handling in components

Code quality fixes:

- Remove 60+ as type assertions (replace with type guards)

- Remove non-null assertions (use optional chaining or explicit checks)

- Convert dynamic imports to static imports (grades, diagnostic)

- Add React.cache() wrapping for read functions

- Parallelize independent queries with Promise.all

- Add explicit return types to 30+ arrow functions

- Replace any with unknown + type guards

- Fix import type for type-only imports

- Add Zod validation schemas for classes and diagnostic modules

- Extract duplicate code (normalizeRoleName, normalizeBcryptHash, logger IP extraction)

- Add console.error to silent catch blocks

- Fix permission naming consistency (exam:proctor_read -> exam:proctor:read)

Architecture doc sync:

- Update 004_architecture_impact_map.md and 005_architecture_data.json

- Update management-modules-audit.md for P0-7 cross-module fix

Moved deleted proctoring event route to deletes/ folder.

src/modules/attendance/components/attendance-sheet.tsx

@@ -43,6 +43,9 @@ const STATUS_OPTIONS: AttendanceStatus[] = [
   "excused",
 ]
 
+const isAttendanceStatus = (v: string): v is AttendanceStatus =>
+  v === "present" || v === "absent" || v === "late" || v === "early_leave" || v === "excused"
+
 function SubmitButton() {
   const { pending } = useFormStatus()
   return (
@@ -180,7 +183,11 @@ export function AttendanceSheet({
                         <TableCell>
                           <Select
                             value={statuses[s.id] ?? "present"}
-                            onValueChange={(v) => handleStatusChange(s.id, v as AttendanceStatus)}
+                            onValueChange={(v) => {
+                              if (isAttendanceStatus(v)) {
+                                handleStatusChange(s.id, v)
+                              }
+                            }}
                           >
                             <SelectTrigger className="h-8">
                               <SelectValue />

src/modules/attendance/data-access.ts

@@ -192,7 +192,7 @@ export async function updateAttendanceRecord(
   id: string,
   data: UpdateAttendanceInput
 ): Promise<void> {
-  const update: Record<string, unknown> = { updatedAt: new Date() }
+  const update: Partial<typeof attendanceRecords.$inferSelect> = { updatedAt: new Date() }
   if (data.status !== undefined) update.status = data.status
   if (data.remark !== undefined) update.remark = data.remark
   if (data.scheduleId !== undefined) update.scheduleId = data.scheduleId