feat(anexos): página de galeria de comprovantes e documentos

Adiciona rota `/attachments` com visualização de todos os anexos do
usuário em grade, visualização inline de imagem e PDF, navegação entre
arquivos do mesmo lançamento e download direto.

Inclui também:
- API REST em `/api/attachments` para servir os arquivos
- Actions `fetch-by-id` e `fetch-dialog-options` em transactions
- Item "Anexos" adicionado à navbar
- `formatBytes` extraído para `src/shared/utils/number.ts`
- Migrations de banco atualizadas
- Fix: uploads e remoções de anexo agora funcionam para todos os
  lançamentos, não apenas os pertencentes a séries

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

src/features/attachments/queries.ts

@@ -0,0 +1,70 @@
+import { and, desc, eq } from "drizzle-orm";
+import { cacheLife, cacheTag } from "next/cache";
+import {
+	attachments,
+	categories,
+	transactionAttachments,
+	transactions,
+} from "@/db/schema";
+import { db } from "@/shared/lib/db";
+import { getAdminPayerId } from "@/shared/lib/payers/get-admin-id";
+
+export type AttachmentForPeriod = {
+	attachmentId: string;
+	fileName: string;
+	fileSize: number;
+	mimeType: string;
+	transactionId: string;
+	transactionName: string;
+	transactionAmount: string;
+	transactionPeriod: string;
+	purchaseDate: Date;
+	categoryName: string | null;
+	categoryIcon: string | null;
+};
+
+export async function fetchAttachmentsForPeriod(
+	userId: string,
+	period: string,
+): Promise<AttachmentForPeriod[]> {
+	"use cache";
+	cacheTag(`dashboard-${userId}`);
+	cacheLife({ revalidate: 3 });
+
+	const adminPayerId = await getAdminPayerId(userId);
+	if (!adminPayerId) return [];
+
+	return db
+		.select({
+			attachmentId: attachments.id,
+			fileName: attachments.fileName,
+			fileSize: attachments.fileSize,
+			mimeType: attachments.mimeType,
+			transactionId: transactions.id,
+			transactionName: transactions.name,
+			transactionAmount: transactions.amount,
+			transactionPeriod: transactions.period,
+			purchaseDate: transactions.purchaseDate,
+			categoryName: categories.name,
+			categoryIcon: categories.icon,
+		})
+		.from(transactionAttachments)
+		.innerJoin(
+			attachments,
+			and(
+				eq(transactionAttachments.attachmentId, attachments.id),
+				eq(attachments.userId, userId),
+			),
+		)
+		.innerJoin(
+			transactions,
+			and(
+				eq(transactionAttachments.transactionId, transactions.id),
+				eq(transactions.userId, userId),
+				eq(transactions.payerId, adminPayerId),
+				eq(transactions.period, period),
+			),
+		)
+		.leftJoin(categories, eq(transactions.categoryId, categories.id))
+		.orderBy(desc(transactions.purchaseDate), desc(attachments.id));
+}