fix(assets): bounded sorted lists, escaped search, trigram index

[amberly-d]

Closes #1587
Closes #1586
Closes #1585
Closes #1584

Summary

• List endpoints accept an unbounded limit and offer no sorting #1584: assets and users list endpoints now take a validated query DTO extending the shared PaginationQueryDto: page >= 1, limit 1-100 (anything above returns 400; the services also clamp to 100 as defence in depth), and a whitelisted sortBy / sortOrder. Ordering always ends with an id tiebreaker so pages are stable. Users gain the same sort options and an enum-validated role.
• Asset search builds %term% ILIKE patterns without escaping and has no supporting index #1585: search terms have %, _ and \ escaped (ESCAPE '\'), so 100% matches literal text only, for assets and users. Adds migration AddAssetSearchTrigramIndexes (pg_trgm GIN indexes on name, assetTag, serialNumber). The migration is guarded so it is a no-op if the assets table doesn't exist yet.
• Add database indexes for the asset columns used in filters and joins #1586 and Asset status and condition are free-form strings with no database or DTO constraint #1587 are not implemented in this PR (only 2 of the 4 assigned issues are addressed).

Behaviour change to note: invalid limit/sortBy/role values on GET /assets and GET /users now return 400 instead of being ignored. Other list endpoints (departments, vendors etc.) already use PaginationQueryDto.

Linked issues

Closes #1587, #1586, #1585, #1584 (see top of description)

Checks

• Lint passes for every area touched
• Build passes
• Tests pass
• No secrets, keys, or .env values are committed

Not run: dependencies were not installed in this workflow, so lint, build and tests were not executed. The migration and the EXPLAIN acceptance criterion were not run against a database. The pg_trgm extension needs a role allowed to create extensions.

[vercel]

@amberly-d is attempting to deploy a commit to the naijabuz's projects Team on Vercel.

A member of the Team first needs to authorize it.

[drips-wave]

@amberly-d Great news! 🎉 Based on an automated assessment of this PR, the linked Wave issue(s) no longer count against your application limits.

You can now already apply to more issues while waiting for a review of this PR. Keep up the great work! 🚀

Learn more about application limits