feat(block1): inventory walking skeleton + first quick-add slice

Stand up the Tanemaki monorepo and the first end-to-end vertical slice of
Block 1 (offline, encrypted inventory): add a seed → see it in a categorized,
searchable list → it persists → reopen and it's still there.

Architecture (state management like G1nkgo, adapted to Tane's reality):
- flutter_bloc (Cubit-first), but the encrypted Drift DB is the single source
  of truth; cubits stream from repositories (no hydrated_bloc/Hive, which would
  write plaintext at rest).
- get_it composition root; go_router; slang i18n (ES/EN, Weblate-friendly JSON).

Workspace & core:
- pub workspace: packages/commons_core (pure Dart) + apps/app_seeds (Flutter).
- commons_core primitives: UUIDv7 IdGen, Hybrid Logical Clock, Quantity value
  type (+ plant-aware QuantityKind), IdentityService root-seed stub.

Data & security:
- Drift schemaVersion=1 with all 10 Block-1 tables + common CRDT columns
  (HLC updated_at, last_author, tombstones); Movement append-only.
- SQLCipher via an injectable executor that refuses to open a plaintext DB;
  DB key + root seed in the OS keystore (separate secrets).
- Exported drift_schema_v1.json + migration scaffold.

Tests (near-TDD; nothing merges without tests):
- commons_core units (24), Drift migration test, "no plaintext at rest"
  security guard (runs where SQLCipher is present, skips otherwise),
  repository, widget, full quick-add flow, file-reopen persistence, and a
  no-hardcoded-strings i18n guard. GitLab CI: format + analyze + test + coverage.

Follow-on Block-1 stories (item detail/edit, species catalog, germination UI)
and all of Block 2 remain out of scope.

apps/app_seeds/pubspec.yaml

@@ -0,0 +1,62 @@
+name: tane
+description: "Tanemaki — local-first, encrypted, decentralized traditional-seed inventory."
+publish_to: 'none'
+version: 0.1.0+1
+
+environment:
+  sdk: ^3.11.5
+
+resolution: workspace
+
+dependencies:
+  flutter:
+    sdk: flutter
+  flutter_localizations:
+    sdk: flutter
+
+  commons_core:
+    path: ../../packages/commons_core
+
+  # State management (Cubit-first). Drift streams are the source of truth.
+  flutter_bloc: ^9.1.1
+  equatable: ^2.0.5
+
+  # Encrypted local database.
+  drift: ^2.28.0
+  drift_flutter: ^0.2.4
+  sqlite3: ^2.7.5
+  sqlcipher_flutter_libs: ^0.6.5
+
+  # Dependency injection composition root.
+  get_it: ^8.0.3
+
+  # i18n (Weblate-friendly JSON per locale).
+  slang: ^4.7.0
+  slang_flutter: ^4.7.0
+
+  # Secure key storage (OS keystore).
+  flutter_secure_storage: ^9.2.4
+
+  # Routing + media + paths.
+  go_router: ^14.6.2
+  image_picker: ^1.1.2
+  path: ^1.9.0
+  path_provider: ^2.1.5
+
+  cupertino_icons: ^1.0.8
+
+dev_dependencies:
+  flutter_test:
+    sdk: flutter
+  integration_test:
+    sdk: flutter
+
+  flutter_lints: ^6.0.0
+  build_runner: ^2.4.13
+  drift_dev: ^2.28.0
+  slang_build_runner: ^4.7.0
+  mocktail: ^1.0.4
+
+flutter:
+  uses-material-design: true
+  # Seed strings for slang live under lib/i18n (not a Flutter asset; compiled).