feat: AssetRepository SQLite + cycle need-review persistant (v0.10.0)

Table assets sur node:sqlite (Node 24, zéro dep native) : CRUD,
listByStatus, incrementExec, setRiskTier anti-escalade, expireProvisional
(cron PROVISOIRE→BLOQUÉ). 6 tests. Bump Node 24 (sqlite stable), Dockerfile
24.13 + copie tsconfig.build.json. 0 vuln.

Palier de risque : reversible (persistance d'état, aucune mutation d'infra).

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>

orchestrator/package.json

@@ -5,7 +5,7 @@
   "type": "module",
   "description": "CHLOVA — cerveau LLM en boucle tool-calling (Phase 1 : lecture seule)",
   "engines": {
-    "node": ">=22"
+    "node": ">=24"
   },
   "scripts": {
     "build": "tsc -p tsconfig.build.json",
@@ -22,7 +22,7 @@
     "zod": "3.24.1"
   },
   "devDependencies": {
-    "@types/node": "22.13.1",
+    "@types/node": "24.13.2",
     "tsx": "4.22.4",
     "typescript": "5.7.3",
     "vitest": "4.1.9"