feat: add escape hatch audit tooling

[benvinegar]

Summary

• add an ESLint plugin for auditing scoped DB escape hatches
• add a standalone drizzle-scoped-db lint-escapes scanner for Oxlint/CI workflows
• document audit-comment usage and cover scanner/plugin exports in tests

Validation

• pnpm format:check
• pnpm lint
• pnpm typecheck
• pnpm test
• pnpm coverage
• pnpm build

This PR description was generated by Pi using OpenAI GPT-5 Codex