feat: implement incident reporting and management system

- Add incident reporting routes and logic to handle creation, updating, and retrieval of incidents.
- Implement visibility rules for users based on roles (reporters, supervisors).
- Create tests for incident reporting functionality to ensure correctness and reliability.
- Introduce site and area management routes, including validation for area hierarchy.
- Establish user management routes with role-based access control for creating and updating users.
- Add setup routes for initializing the application with an organization and admin user.
- Implement shared enums and schemas for consistent validation and data handling across the application.
- Create a test helper for setting up an in-memory database and API client for testing.
- Add TypeScript configuration for server-side code with strict type checking and module resolution.

shared/enums.ts

@@ -0,0 +1,35 @@
+// Domain vocabularies shared by the server (database enums, validation) and the web app.
+
+/** Ordered from least to most privileged. */
+export const roles = ['reporter', 'supervisor', 'safety_manager', 'admin'] as const
+export type Role = (typeof roles)[number]
+
+export function hasRole(role: Role, minimum: Role): boolean {
+  return roles.indexOf(role) >= roles.indexOf(minimum)
+}
+
+export const incidentTypes = ['near_miss', 'hazard', 'injury', 'illness', 'property_damage', 'environmental'] as const
+export type IncidentType = (typeof incidentTypes)[number]
+
+export const severities = ['low', 'medium', 'high', 'critical'] as const
+export type Severity = (typeof severities)[number]
+
+/** Workflow: Reported → Triage → Investigation → Corrective actions → Verification → Closed. */
+export const incidentStatuses = ['reported', 'triage', 'investigation', 'actions', 'verification', 'closed'] as const
+export type IncidentStatus = (typeof incidentStatuses)[number]
+
+export const areaKinds = ['building', 'area', 'line', 'other'] as const
+export type AreaKind = (typeof areaKinds)[number]
+
+export const employmentTypes = ['employee', 'temporary', 'contractor', 'visitor'] as const
+
+export const treatmentLevels = ['none', 'first_aid', 'medical_treatment', 'hospitalized', 'fatality'] as const
+
+export const rcaMethods = ['five_whys', 'fishbone', 'other'] as const
+
+/** Fishbone (6M) categories. */
+export const rootCauseCategories = ['people', 'process', 'equipment', 'materials', 'environment', 'management'] as const
+
+export const actionKinds = ['corrective', 'preventive'] as const
+
+export const actionStatuses = ['open', 'in_progress', 'done', 'verified', 'cancelled'] as const