Add plant catalog backend: CRUD + seeded built-ins (#12)

Extends the plants store (which had only the /full read side) with full
catalog CRUD, adds a service layer with visibility/immutability rules, REST
endpoints, and a seed migration of ~32 built-ins.

- 0003_seed_plants.sql: 32 built-in plants (owner_id NULL, read-only), seeded
  once by the version-tracked migration runner.
- store: ListPlantsForActor (built-ins + own), Get/Create/Update/Delete +
  CountPlantingsForPlant; isForeignKeyViolation backstop for the RESTRICT FK.
- service: built-ins are read-only (ErrForbidden); another user's plants are
  invisible (ErrNotFound); delete of a referenced plant → ErrPlantInUse (409);
  validation mirrors the schema (category enum, spacing>0, hex color, icon).
- api: GET,POST /plants and PATCH,DELETE /plants/:id with the version guard.
- Made the migration-count store tests derive their expectation from the files
  so future migrations don't break them.

Service + API tests cover visibility, built-in immutability, validation,
version conflict, and delete-in-use.

Co-Authored-By: Claude Opus 4.8 (1M context) <[email protected]>
Claude-Session: https://claude.ai/code/session_01JdQpdYYsTgtkJBxbcpAszi

internal/domain/domain.go

@@ -17,6 +17,9 @@ var (
 	// ErrVersionConflict means the row's version did not match the one supplied
 	// with a PATCH/DELETE; the caller should refetch and retry.
 	ErrVersionConflict = errors.New("version conflict")
+	// ErrPlantInUse means a plant can't be deleted because plantings still
+	// reference it (the FK is ON DELETE RESTRICT). Mapped to 409.
+	ErrPlantInUse = errors.New("plant is referenced by plantings")
 
 	// ErrInvalidInput means the caller supplied structurally invalid data (empty
 	// required field, malformed value). Mapped to 400.