refactor(server): dedupe shard-state shaping, upsert builder, and config DB models

Address the SonarQube copy-paste findings that reflect real duplication (as
opposed to the intentional cross-package / admin-player mirror copies, which
are by-design and left as-is):

- shardState.model.js: listOnline() re-inlined the exact field mapping that
  shapeOnline() already provides (used by listOnlineLinked). Collapse it onto
  shapeOnline so the two can no longer drift.
- shardState.db.js: extract a single upsertRow(table, pkCol, pk, fields,
  {coalesce}) builder for the five near-identical INSERT ... ON DUPLICATE KEY
  UPDATE bodies (online/houses/champs/guilds/governors). shard_online keeps its
  COALESCE-on-NULL semantics via the coalesce flag.
- botConfig/emailConfig/uoLinkConfig .db.js: generate get()/upsert() from a
  shared singletonConfigDb(table, cols) factory instead of three byte-identical
  copies.

Behavior unchanged; full server suite (381 tests) passes.

Co-Authored-By: Claude <noreply@anthropic.com>

server/src/model/shardState/shardState.model.js

@@ -86,26 +86,7 @@ async function listOnlineLinked() {
 
 async function listOnline() {
   const rows = await db.listOnline()
-  return rows.map((r) => ({
-    serial: r.serial,
-    name: r.name,
-    acct: r.acct,
-    webId: r.web_id,
-    map: r.map,
-    x: r.x,
-    y: r.y,
-    z: r.z,
-    hits: r.hits,
-    hitsMax: r.hits_max,
-    mana: r.mana,
-    manaMax: r.mana_max,
-    stam: r.stam,
-    stamMax: r.stam_max,
-    str: r.str,
-    dex: r.dex,
-    int: r.int,
-    updatedAt: r.updated_at,
-  }))
+  return rows.map(shapeOnline)
 }
 
 // Append a gold-supply sample (economy.supply).