feat: tiered costs feature + admin tier management + tag selection

- costs: nullable notes (fix create without notes), drop renewalDate
  (schema + API + UI), gate POST/PATCH/DELETE to admin + costs feature
- feature middleware: admin-aware hasFeature + getEntitlements union;
  /auth/me and login return resolved entitlements
- users: tier enum (free/premium/enterprise) in create/update/list,
  admin UI tier select + tier badge
- tags: GET /tags/all, TagInput autocomplete in new/edit tool forms,
  feature suggestions on focus, query invalidation on create/update
- openapi: nullable ToolUpdate urls, ToolUpdate tier fields, listAllTags
- Dockerfile: push-force to drop renewal_date column

lib/db/src/schema/tool-costs.ts

@@ -9,7 +9,6 @@ export const toolCostsTable = pgTable("tool_costs", {
   billingPeriod: text("billing_period", { enum: ["monthly", "quarterly", "yearly"] }),
   cost: numeric("cost", { precision: 10, scale: 2 }),
   currency: text("currency").default("EUR"),
-  renewalDate: timestamp("renewal_date", { withTimezone: true }),
   notes: text("notes"),
   createdBy: integer("created_by").references(() => usersTable.id, { onDelete: "set null" }),
   createdAt: timestamp("created_at", { withTimezone: true }).notNull().defaultNow(),