Support Engagement Opportunities discovery

[jmgasper]

Summary

• publish the Engagements Prisma client contract used by opportunities-api-v6
• add appliedByMe=true to public engagement discovery with optional authentication while retaining anonymous behavior when omitted or false
• return public list, active-list, and detail records through an explicit allow-list that excludes account, SMU, SPOC, received-date, creator-email, and assignment data
• retain protected fields for authorized private, privileged, M2M, and my-assignment workflows
• expose PostgreSQL driver settings for bounded connection acquisition, client query, and server statement timeouts
• extend public requiredSkills discovery to accept up to 20 standardized-skill UUIDs or case-insensitive exact names, using OR semantics before database count/sort/pagination
• resolve names with one batched exact M2M request plus bounded case-insensitive fallback lookups; unknown names and dependency/auth failures fail closed and fuzzy/partial matches are rejected
• preserve requiredSkills as the ID array and add safe skills: [{ id, name }] metadata to public list, active-list, and detail records with batched, non-fatal display hydration

Validation

• pnpm test --runInBand (13 suites, 135 tests passed)
• targeted skill/filter/public-response regressions (72 tests passed)
• pnpm test:external-client (3 tests passed)
• pnpm lint
• pnpm build

Latest head: 1aedfa29823305cdf1593c251885850f8e9768d2

Part of the Topcoder Opportunities v6 experience.