chore: upgrade @objectstack 9.4→9.5.1; fix all-aggregator + body-only hook crashes

[xuyushun441-sys]

Why

Upgraded to the latest platform (@objectstack 9.5.1) and runtime-tested the all environment in a browser — which surfaced two real bugs that objectstack build + tsc never caught (build doesn't execute hooks; the stricter 9.5.1 runtime exposed both).

Fixes

1. all aggregator served stale artifacts → failed to boot on 9.5.1.
compile-marketplace.mjs's install step skipped any cache entry that already existed, so after pnpm -r build it kept old per-template artifacts — including dashboard widgets in the pre-ADR-0021 object/aggregate shape that the 9.5.1 runtime metadata plugin rejects. The workspace template is the source of truth for its own id, so it now always refreshes its cache entry (real marketplace-UI installs use different ids and are untouched).

2. Body-only hooks referenced module-scope helpers → ReferenceError on insert.
Hooks run body-only in the QuickJS sandbox, so module-scope helpers aren't in scope at runtime. pm_project (deriveHealth) threw on every insert → 0 project rows → child objects then failed their required project lookup. pm_risk (SCALE) and helpdesk_ticket (SLA maps) had the same latent bug (helpdesk escaped only because seed rows pre-fill the guarded fields). Helpers moved inside each handler body.

Runtime verification (browser + DB)

Ran objectstack dev all on 9.5.1, registered/logged into the console — all 9 apps load, and seed data inserts for every template. Direct DB check after the fix:

pm_project=3  pm_milestone=5  pm_risk=3  pm_issue=3  pm_resource=10
PRJ-001 active → health=on_track   PRJ-002 at_risk → health=off_track (hook-computed)
RISK-001 pri=16   RISK-002 pri=9   RISK-003 pri=15 (hook-computed)

Also spot-checked live fields across templates: helpdesk ticket_number/SLA/ai_*, procurement match_status, compliance is_remediation_overdue, contracts currency/approver, expense reimbursable, hr expiry_status, content SEO fields.

Repo typecheck + build (9/9) + format:check clean.

🤖 Generated with Claude Code