Move the demo market to Mexico City, priced in US dollars

The showcase was a Barcelona market: Catalan names, +34 numbers, euro
rates and "Carrer Example 12" on every job. Presented to a Mexican
client, all of that reads as somebody else's product.

City comes from NEXT_PUBLIC_CITY_* as before, now Ciudad de México at
19.4326/-99.1332, with MAPBOX_COUNTRY=mx. The seed's fallbacks were
Barcelona literals, so an unset env quietly seeded a different city
than the app rendered — they now agree.

Two db tests pinned the Barcelona centre as a hardcoded constant, which
is why the deck returned zero cards on the first run here: every pro was
a continent outside the radius. They read the same env as the seed now,
so the trap cannot recur.

Money: formatCents defaults to USD/en-US, and the nine hardcoded euro
signs across the card, search rows, quote strip and forms are dollars.
The rate NUMBERS are unchanged and still read high for CDMX — that is a
pricing decision, not a currency one, and is left alone deliberately.

Seed people are Mexican, addressed on real Roma/Condesa streets rotated
by index rather than one placeholder repeated. Phones moved to +52 55,
which moves the demo login to +525500000000 / 000000.

Also in here, from the same session:
- Sending a job now confirms. The mutation always succeeded; the sheet
  just closed with no receipt, which from the customer's side is
  indistinguishable from a dead button. Dismissing that receipt resolves
  as 'sent', so the card does not return to the deck.
- Media moves to DigitalOcean Spaces, with the public origin derived
  from bucket and region instead of a second env var to keep in sync.
- Managed-Postgres TLS: DATABASE_CA_CERT takes a path or inline PEM.
- The client-facing project panel beside the running app.
- Two profiles removed and four renamed to match their photos.

Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>

packages/api/test/reviews.router.test.ts

@@ -19,7 +19,7 @@ import { afterAll, beforeAll, describe, expect, it } from 'vitest';
 
 config({ path: '../../.env' });
 
-const { closePool, db } = await import('@linkder/db');
+const { closePool, db } = await import('@linkdr/db');
 const { appRouter } = await import('../src/root');
 const { createInnerContext } = await import('../src/context');
 const { createCallerFactory } = await import('../src/trpc');
@@ -45,12 +45,12 @@ let probeClient: string;
 
 beforeAll(async () => {
   const [marc] = await db.execute<{ id: string }>(
-    sql`SELECT id FROM users WHERE name = 'Marc Oliveras' LIMIT 1`,
+    sql`SELECT id FROM users WHERE name = 'Sergio Fabela' LIMIT 1`,
   );
   reviewedPro = marc!.id;
 
   const [arnau] = await db.execute<{ id: string }>(
-    sql`SELECT id FROM users WHERE name = 'Away Arnau' LIMIT 1`,
+    sql`SELECT id FROM users WHERE name = 'Away Arturo' LIMIT 1`,
   );
   awayPro = arnau!.id;
 
@@ -194,7 +194,7 @@ describe('pro.reviews', () => {
   });
 
   it('is not a way to read a pro who is off the deck', async () => {
-    // Away Arnau has a seeded review history and is verified — only holiday mode
+    // Away Arturo has a seeded review history and is verified — only holiday mode
     // hides him. If this stopped 404ing, reviews would be the way around
     // publicProfile rather than a view onto it.
     await expect(anon().pro.reviews({ proId: awayPro })).rejects.toThrow(/NOT_FOUND|not found/i);
@@ -205,7 +205,7 @@ describe('pro.reviews', () => {
 
   it('404s for an unverified pro, exactly as the profile does', async () => {
     const [ulla] = await db.execute<{ id: string }>(
-      sql`SELECT id FROM users WHERE name = 'Unverified Ulla' LIMIT 1`,
+      sql`SELECT id FROM users WHERE name = 'Unverified Ulises' LIMIT 1`,
     );
     await expect(anon().pro.reviews({ proId: ulla!.id })).rejects.toThrow(/NOT_FOUND|not found/i);
   });