feat: tiered costs feature + admin tier management + tag selection

- costs: nullable notes (fix create without notes), drop renewalDate
  (schema + API + UI), gate POST/PATCH/DELETE to admin + costs feature
- feature middleware: admin-aware hasFeature + getEntitlements union;
  /auth/me and login return resolved entitlements
- users: tier enum (free/premium/enterprise) in create/update/list,
  admin UI tier select + tier badge
- tags: GET /tags/all, TagInput autocomplete in new/edit tool forms,
  feature suggestions on focus, query invalidation on create/update
- openapi: nullable ToolUpdate urls, ToolUpdate tier fields, listAllTags
- Dockerfile: push-force to drop renewal_date column

artifacts/toolrate/src/components/feature-input.tsx

@@ -23,13 +23,14 @@ export function FeatureInput({ value, onChange, placeholder, "data-testid": test
 
   const known: string[] = allFeatures.data ?? [];
 
-  const suggestions = value.trim().length >= 1
-    ? known.filter(
-        (f) =>
-          f.toLowerCase().includes(value.toLowerCase()) &&
-          f.toLowerCase() !== value.toLowerCase()
-      ).slice(0, 6)
-    : [];
+  const q = value.trim();
+  const suggestions = known
+    .filter(
+      (f) =>
+        q.length === 0 ||
+        (f.toLowerCase().includes(q.toLowerCase()) && f.toLowerCase() !== q.toLowerCase()),
+    )
+    .slice(0, 6);
 
   useEffect(() => {
     function handleClickOutside(e: MouseEvent) {