Move the demo market to Mexico City, priced in US dollars

The showcase was a Barcelona market: Catalan names, +34 numbers, euro
rates and "Carrer Example 12" on every job. Presented to a Mexican
client, all of that reads as somebody else's product.

City comes from NEXT_PUBLIC_CITY_* as before, now Ciudad de México at
19.4326/-99.1332, with MAPBOX_COUNTRY=mx. The seed's fallbacks were
Barcelona literals, so an unset env quietly seeded a different city
than the app rendered — they now agree.

Two db tests pinned the Barcelona centre as a hardcoded constant, which
is why the deck returned zero cards on the first run here: every pro was
a continent outside the radius. They read the same env as the seed now,
so the trap cannot recur.

Money: formatCents defaults to USD/en-US, and the nine hardcoded euro
signs across the card, search rows, quote strip and forms are dollars.
The rate NUMBERS are unchanged and still read high for CDMX — that is a
pricing decision, not a currency one, and is left alone deliberately.

Seed people are Mexican, addressed on real Roma/Condesa streets rotated
by index rather than one placeholder repeated. Phones moved to +52 55,
which moves the demo login to +525500000000 / 000000.

Also in here, from the same session:
- Sending a job now confirms. The mutation always succeeded; the sheet
  just closed with no receipt, which from the customer's side is
  indistinguishable from a dead button. Dismissing that receipt resolves
  as 'sent', so the card does not return to the deck.
- Media moves to DigitalOcean Spaces, with the public origin derived
  from bucket and region instead of a second env var to keep in sync.
- Managed-Postgres TLS: DATABASE_CA_CERT takes a path or inline PEM.
- The client-facing project panel beside the running app.
- Two profiles removed and four renamed to match their photos.

Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>

packages/storage/test/storage.test.ts

@@ -107,11 +107,11 @@ describe('configuration', () => {
   beforeEach(() => {
     resetStorageClient();
     for (const k of [
-      'R2_ACCOUNT_ID',
-      'R2_ACCESS_KEY_ID',
-      'R2_SECRET_ACCESS_KEY',
-      'R2_BUCKET',
-      'R2_PUBLIC_URL',
+      'SPACES_REGION',
+      'SPACES_KEY',
+      'SPACES_SECRET',
+      'SPACES_BUCKET',
+      'SPACES_CDN_URL',
     ]) {
       delete process.env[k];
     }
@@ -131,7 +131,7 @@ describe('configuration', () => {
         contentLength: 100,
         ownerId: OWNER,
       }),
-    ).rejects.toThrow(/R2_ACCOUNT_ID.*R2_ACCESS_KEY_ID/s);
+    ).rejects.toThrow(/SPACES_REGION.*SPACES_KEY/s);
   });
 
   it('validates the upload before it complains about configuration', async () => {
@@ -166,13 +166,13 @@ describe('key/URL contract with the API', () => {
   });
 
   it('accepts that key against the credential schema', async () => {
-    const { credentialSchema } = await import('@linkder/shared');
+    const { credentialSchema } = await import('@linkdr/shared');
     const key = buildKey('credential', OWNER, 'application/pdf');
     expect(credentialSchema.safeParse({ kind: 'insurance', fileKey: key }).success).toBe(true);
   });
 
   it('rejects an empty key rather than storing a dangling reference', async () => {
-    const { credentialSchema } = await import('@linkder/shared');
+    const { credentialSchema } = await import('@linkdr/shared');
     expect(credentialSchema.safeParse({ kind: 'insurance', fileKey: '' }).success).toBe(false);
   });
 });