feat(core-ext): storage-sqlite, auth-apikey, provider-openai-compat

- storage-sqlite: bun:sqlite StorageNamespace backend + migrations (21 bun tests)
- auth-apikey: pure resolver from env → ApiKeyCredentials (4 tests)
- provider-openai-compat: OpenAI-compatible SSE stream → ProviderEvents
- orchestrator fixes: provider imports (@dispatch/kernel), missing dep,
  exactOptionalPropertyTypes (omit-when-undefined), root tsconfig refs
- vitest excludes storage-sqlite (bun:sqlite); test:bun runs it under bun

1 files changed, 14 insertions, 0 deletions

diff --git a/packages/storage-sqlite/src/migrate.ts b/packages/storage-sqlite/src/migrate.ts
new file mode 100644
index 0000000..bdd32b8
--- /dev/null
+++ b/packages/storage-sqlite/src/migrate.ts
@@ -0,0 +1,14 @@
+export interface Migration {
+	readonly version: number;
+	readonly name: string;
+	readonly up: string;
+}
+
+export function computePending(
+	appliedVersions: ReadonlySet<number>,
+	migrations: readonly Migration[],
+): readonly Migration[] {
+	return migrations
+		.filter((m) => !appliedVersions.has(m.version))
+		.sort((a, b) => a.version - b.version);
+}