feat(block1): inventory walking skeleton + first quick-add slice

Stand up the Tanemaki monorepo and the first end-to-end vertical slice of
Block 1 (offline, encrypted inventory): add a seed → see it in a categorized,
searchable list → it persists → reopen and it's still there.

Architecture (state management like G1nkgo, adapted to Tane's reality):
- flutter_bloc (Cubit-first), but the encrypted Drift DB is the single source
  of truth; cubits stream from repositories (no hydrated_bloc/Hive, which would
  write plaintext at rest).
- get_it composition root; go_router; slang i18n (ES/EN, Weblate-friendly JSON).

Workspace & core:
- pub workspace: packages/commons_core (pure Dart) + apps/app_seeds (Flutter).
- commons_core primitives: UUIDv7 IdGen, Hybrid Logical Clock, Quantity value
  type (+ plant-aware QuantityKind), IdentityService root-seed stub.

Data & security:
- Drift schemaVersion=1 with all 10 Block-1 tables + common CRDT columns
  (HLC updated_at, last_author, tombstones); Movement append-only.
- SQLCipher via an injectable executor that refuses to open a plaintext DB;
  DB key + root seed in the OS keystore (separate secrets).
- Exported drift_schema_v1.json + migration scaffold.

Tests (near-TDD; nothing merges without tests):
- commons_core units (24), Drift migration test, "no plaintext at rest"
  security guard (runs where SQLCipher is present, skips otherwise),
  repository, widget, full quick-add flow, file-reopen persistence, and a
  no-hardcoded-strings i18n guard. GitLab CI: format + analyze + test + coverage.

Follow-on Block-1 stories (item detail/edit, species catalog, germination UI)
and all of Block 2 remain out of scope.

apps/app_seeds/test/support/test_support.dart

@@ -0,0 +1,56 @@
+import 'package:commons_core/commons_core.dart';
+import 'package:drift/native.dart';
+import 'package:flutter/material.dart';
+import 'package:flutter_bloc/flutter_bloc.dart';
+import 'package:flutter_localizations/flutter_localizations.dart';
+import 'package:flutter_test/flutter_test.dart';
+import 'package:tane/data/variety_repository.dart';
+import 'package:tane/db/database.dart';
+import 'package:tane/i18n/strings.g.dart';
+import 'package:tane/state/inventory_cubit.dart';
+
+/// A fresh in-memory database for host tests (unencrypted; encryption is
+/// verified separately in the SQLCipher-only security test).
+AppDatabase newTestDatabase() => AppDatabase(NativeDatabase.memory());
+
+/// Unmounts the widget tree *inside* the test and drains the zero-duration
+/// timer Drift schedules when its stream subscription is cancelled. Without
+/// this, flutter_test reports "a Timer is still pending after disposal". Call
+/// at the end of any widget test that mounts an [InventoryCubit].
+Future<void> disposeTree(WidgetTester tester) async {
+  await tester.pumpWidget(const SizedBox.shrink());
+  await tester.pump(const Duration(milliseconds: 10));
+}
+
+VarietyRepository newTestRepository(
+  AppDatabase db, {
+  String nodeId = 'test-node',
+}) => VarietyRepository(db, idGen: IdGen(), nodeId: nodeId);
+
+/// Wraps [child] with the providers a screen expects (repository, inventory
+/// cubit) plus i18n and Material localizations, pinned to [locale].
+Widget wrapScreen({
+  required VarietyRepository repository,
+  required Widget child,
+  AppLocale locale = AppLocale.en,
+}) {
+  LocaleSettings.setLocaleSync(locale);
+  return TranslationProvider(
+    child: RepositoryProvider.value(
+      value: repository,
+      child: BlocProvider(
+        create: (_) => InventoryCubit(repository),
+        child: MaterialApp(
+          locale: locale.flutterLocale,
+          supportedLocales: AppLocaleUtils.supportedLocales,
+          localizationsDelegates: const [
+            GlobalMaterialLocalizations.delegate,
+            GlobalWidgetsLocalizations.delegate,
+            GlobalCupertinoLocalizations.delegate,
+          ],
+          home: child,
+        ),
+      ),
+    ),
+  );
+}