feat: add telephony layer and asterisk-events worker

- packages/telephony: cliente AMI proprio sobre TCP puro (sem dependencia
  de terceiros pouco mantida) + interface TelephonyProvider +
  AsteriskTelephonyProvider (Originate, Hangup, QueuePause/Add/Remove,
  QueueStatus, ExtensionState, DeviceState, PJSIPShowEndpoints/Contacts,
  Reload, runCommand, stream de eventos). Testado contra o Asterisk real —
  o formato de resposta do Command mudou entre versoes do Asterisk
  (headers 'Output:' repetidos em vez de 'Response: Follows'/'--END
  COMMAND--'), corrigido apos inspecionar os bytes crus do protocolo
- apps/asterisk-events: worker dedicado a manter a conexao AMI viva,
  normalizar eventos (Newchannel, DialBegin/End, Hangup, DeviceStateChange,
  ContactStatus, eventos de fila/agente), persistir ExtensionState no
  Postgres e publicar em Redis pub/sub para consumo em tempo real.
  Containerizado, alcanca o Asterisk (host network) via
  host.docker.internal a partir da rede bridge. Heartbeat no Redis para
  health check
- packages/database: novos modelos Trunk, Extension, ExtensionState
  (migration aplicada)
- packages/shared: secret-crypto.ts (AES-256-GCM para credenciais de trunk
  e senha SIP em repouso, master key externa ao banco)

Testado ponta a ponta: chamada real originada -> eventos normalizados
recebidos via Redis SUBSCRIBE, heartbeat renovando no TTL correto.

packages/database/prisma/migrations/20260827153251_add_trunks_extensions_extension_states/migration.sql

@@ -0,0 +1,70 @@
+-- CreateEnum
+CREATE TYPE "TrunkType" AS ENUM ('IP', 'AUTH', 'REGISTRATION');
+
+-- CreateEnum
+CREATE TYPE "DtmfMode" AS ENUM ('rfc4733', 'info', 'inband', 'auto');
+
+-- CreateTable
+CREATE TABLE "trunks" (
+    "id" TEXT NOT NULL,
+    "name" TEXT NOT NULL,
+    "type" "TrunkType" NOT NULL,
+    "host" TEXT NOT NULL,
+    "port" INTEGER NOT NULL DEFAULT 5060,
+    "transport" TEXT NOT NULL DEFAULT 'udp',
+    "username" TEXT,
+    "secret_encrypted" TEXT,
+    "from_user" TEXT,
+    "from_domain" TEXT,
+    "contact_user" TEXT,
+    "outbound_proxy" TEXT,
+    "context" TEXT NOT NULL DEFAULT 'outbound',
+    "caller_id" TEXT,
+    "codecs" TEXT[] DEFAULT ARRAY['ulaw', 'alaw']::TEXT[],
+    "dtmf_mode" "DtmfMode" NOT NULL DEFAULT 'rfc4733',
+    "qualify_frequency" INTEGER NOT NULL DEFAULT 60,
+    "max_channels" INTEGER,
+    "max_cps" INTEGER NOT NULL DEFAULT 5,
+    "allowed_ips" TEXT[] DEFAULT ARRAY[]::TEXT[],
+    "enabled" BOOLEAN NOT NULL DEFAULT true,
+    "created_at" TIMESTAMP(3) NOT NULL DEFAULT CURRENT_TIMESTAMP,
+    "updated_at" TIMESTAMP(3) NOT NULL,
+
+    CONSTRAINT "trunks_pkey" PRIMARY KEY ("id")
+);
+
+-- CreateTable
+CREATE TABLE "extensions" (
+    "id" TEXT NOT NULL,
+    "number" TEXT NOT NULL,
+    "name" TEXT NOT NULL,
+    "sip_password_encrypted" TEXT NOT NULL,
+    "caller_id" TEXT,
+    "context" TEXT NOT NULL DEFAULT 'b2bcall-agents',
+    "codecs" TEXT[] DEFAULT ARRAY['ulaw', 'alaw']::TEXT[],
+    "transport" TEXT NOT NULL DEFAULT 'udp',
+    "max_contacts" INTEGER NOT NULL DEFAULT 1,
+    "qualify_frequency" INTEGER NOT NULL DEFAULT 60,
+    "enabled" BOOLEAN NOT NULL DEFAULT true,
+    "created_at" TIMESTAMP(3) NOT NULL DEFAULT CURRENT_TIMESTAMP,
+    "updated_at" TIMESTAMP(3) NOT NULL,
+
+    CONSTRAINT "extensions_pkey" PRIMARY KEY ("id")
+);
+
+-- CreateTable
+CREATE TABLE "extension_states" (
+    "extension" TEXT NOT NULL,
+    "device_state" TEXT,
+    "contact_status" TEXT,
+    "contact_uri" TEXT,
+    "updated_at" TIMESTAMP(3) NOT NULL,
+
+    CONSTRAINT "extension_states_pkey" PRIMARY KEY ("extension")
+);
+
+-- CreateIndex
+CREATE UNIQUE INDEX "trunks_name_key" ON "trunks"("name");
+
+-- CreateIndex
+CREATE UNIQUE INDEX "extensions_number_key" ON "extensions"("number");