feat: add @ottabase/ottaport data import/export package with admin UI

[Copilot]

New package for bulk data import/export across OttaORM models — CSV/JSON/TSV parsing, field mapping with auto-match, batched upserts on a unique field, filtered exports, and job history tracking.

@ottabase/ottaport package

• Parsers — Edge-runtime CSV/TSV (character-by-character state machine, no ReDoS) and JSON array parser with heterogeneous object support
• Import handler — Batched find-then-create/update keyed on a configurable unique field (e.g. email). Returns per-batch and aggregate stats
• Export handler — Query model with optional search, date range, field filters → format as CSV/JSON/TSV download
• PortJob model — Fat model tracking import/export history (direction, status, row counts, filename, R2 key, user, duration)
• portJobsTable schema — SQLite table for job metadata, always-on via CORE_PACKAGES

OttaORM enhancement

Added BaseModel.bulkUpsert(records, uniqueField, options?) — batched find-then-create/update returning { created, updated, failed, errors }.

TanStack app wiring

• 6 admin API endpoints under /api/admin/ottaport/* (models list, import parse, import execute, export download, export preview, job history)
• All endpoints gated by requireAdminAccess({ scope: 'system' })
• Filename sanitization on R2 keys to prevent path traversal
• Field mapping validation against actual model table columns
• AuditLog integration for all import/export operations

Admin UI (/admin/ottaport)

• Import Wizard — drag-drop upload → auto-map columns to model fields → review config → execute with progress → results with error detail
• Export Page — model picker, format selector, search + date range filters, server-side paginated preview table, blob download
• History Page — filterable job log with status badges and pagination

// Server-side usage
import { processImport, processExport } from '@ottabase/ottaport/server';

const result = await processImport(parsedRows, {
  modelEntity: 'users',
  fieldMappings: [{ sourceColumn: 'Email', targetField: 'email' }],
  uniqueField: 'email',
  batchSize: 50,
});
// { status: 'completed', totalCreated: 95, totalUpdated: 5, totalFailed: 0 }

Config migrations refactor

Extracted CORE_PACKAGES array and isCorePackage() helper to DRY the three places that check for always-enabled packages (brandEngine, ottaport).

Security fix

Updated storybook catalog entries from ^10.2.3 → ^10.2.10 (resolves to 10.2.13) to patch WebSocket Hijacking CVE.

---

✨ Let Copilot coding agent set things up for you — coding agent works faster and does higher quality work when set up for your repo.