feat(observabilidade): setup dependências e tipos SessionMeta/SessionEvent

- Instala better-sqlite3 + chokidar + @types/better-sqlite3
- Upgrade googleapis 144 → 171 (resolve 4 vulns moderate em uuid/gaxios)
- Cria api/types/session.ts (SessionMeta, SessionEvent, ParseResult, SessionOutcome)
- Cria SPEC.md raiz com marker APPROVED a referenciar SPEC autoritativo no Hub
- Task 1 de 10 do plano Observabilidade (Espelho)
- Desk #2059, Projecto #65

Security Audit (Regra #47):
- npm audit --audit-level=moderate: 0 vulnerabilities
- Calendar API continua operacional (google.calendar v3 inalterada)

package.json

@@ -17,6 +17,8 @@
   },
   "dependencies": {
     "@types/pg": "^8.20.0",
+    "better-sqlite3": "^12.9.0",
+    "chokidar": "^5.0.0",
     "clsx": "^2.1.1",
     "cors": "^2.8.5",
     "dotenv": "^16.6.1",
@@ -24,7 +26,7 @@
     "express-openid-connect": "^2.19.4",
     "express-rate-limit": "^8.2.1",
     "framer-motion": "^12.30.1",
-    "googleapis": "^144.0.0",
+    "googleapis": "^171.4.0",
     "lucide-react": "^0.563.0",
     "mysql2": "^3.11.5",
     "oidc-client-ts": "^3.0.1",
@@ -44,6 +46,7 @@
     "@testing-library/jest-dom": "^6.9.1",
     "@testing-library/react": "^16.3.2",
     "@testing-library/user-event": "^14.6.1",
+    "@types/better-sqlite3": "^7.6.13",
     "@types/cors": "^2.8.17",
     "@types/express": "^5.0.0",
     "@types/node": "^24.10.10",