Cohort-D PR-D3: wire instrumentScalarWrite into Hono routes with Promise.all + drizzle.transaction

Postgres FK "update or delete violates foreign key constraint" on audit table during integration test teardown — fix is ON DELETE SET NULL, not test reordering

Drizzle migration .sql file exists but `_journal.json` not updated → CI applies nothing, integration tests fail

Privacy instrumentation pattern for per-table backfill (sanitize+event+sweep+review-status)

Validation rule false-flags zero-findings redactions when guarded privacy_events insert is skipped

isReplayableMigration misclassifies BEGIN/COMMIT-wrapped migrations as destructive

RLS audit fails on admin-only services with cross-org reads

Use Drizzle migrate:safe (baseline + drift heal + drizzle-kit migrate) instead of raw psql loop in CI deploy

Better Auth signUpEmail returns synthetic user id when email is taken

Drizzle ORM sql template literals pass parameters as untyped ($1) to Postgres.