feat: add traceability, identities router, install plugin from an archive

[BatLeDev]

Major Update

This release introduces:

• Node.js 24 migration and dependency upgrades
• New identities router (synchronized rename / deletion propagation)
• Processing traceability (lifecycle event emission)
• Plugin installation from a .tgz archive
• New environment variables (robustness & retention)
• Scheduling enhancements (last day of month execution)
• Improved error messages
• Tutorial / documentation link per plugin

---

Summary of Main Changes

1. Platform & Dependencies

   • Node 22 → 24 migration: .nvmrc
   • Base image update & removal of experimental flags: Dockerfile
   • Dependency updates + added file upload support: api/package.json (multer, @types/multer)

2. Identity Management (new router)

   • Organization rename: updates owner.name & owner.departmentName in processings and runs
   • User rename: updates created.name & updated.name
   • Organization or user deletion: cascades deletion of related processings & runs
   • Department deletion: ignored
   • Implementation: api/src/routers/identities.ts

3. Traceability (events)

   • Emits an event on processing creation / update / deletion
   • Supports subscription to all processings of an organization

4. Plugins

   • Installation from a .tgz archive (non‑published / local development plugins)
   • Metadata & configuration validation
   • New documentation field (tutorial / help URL)
   • Core changes: api/src/routers/plugins.ts

5. Robustness & Maintenance

   • Auto‑disable a processing after MAX_FAILURES consecutive failures (default 10)
   • Limit stored execution history via RUNS_RETENTION (default 500 latest runs)

6. Scheduling

   • New option to run a processing on the last day of the month (handles variable month lengths & leap years)

7. Developer / Ops Experience

   • Clearer failure messages (contextualized)
   • Optional environment variables to secure identities & events flow

8. Internal Documentation

   • Per‑plugin tutorial / documentation link via documentation metadata field

---

Environment Variables (New or Modified)

(All new variables are optional.)

API:

• SECRET_IDENTITIES: enables the identities router (shared secret if used)
• PRIVATE_EVENTS_URL: enables emission of lifecycle events to a traceability service
• SECRET_EVENTS: secret used to secure/sign emitted events

Worker:

• MAX_FAILURES (default 10): consecutive failure count before auto‑disabling a processing
• RUNS_RETENTION (default 500): maximum number of runs retained (FIFO pruning)