Fix transpiler: function hoisting + re-export paths + DB seed

Transpiler fixes:
- export function declarations now use hoisted function syntax instead
  of var assignments, fixing modules that reference functions before
  their declaration (e.g., rpc.setCache before export function rpc)
- Re-export paths (export { X } from "./relative") now resolve to
  full module names in require() calls

DB seed fixes:
- Remove SQL comments from multi-value INSERT (pgx doesn't support --)
- Split multi-statement setval into individual Exec calls

Middleware:
- Add /web/database/* to public endpoint whitelist

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

pkg/server/middleware.go

@@ -46,10 +46,8 @@ func AuthMiddleware(store *SessionStore, next http.Handler) http.Handler {
 		path := r.URL.Path
 		if path == "/health" ||
 			path == "/web/login" ||
-			path == "/web/setup" ||
-			path == "/web/setup/install" ||
 			path == "/web/session/authenticate" ||
-			path == "/web/database/list" ||
+			strings.HasPrefix(path, "/web/database/") ||
 			path == "/web/webclient/version_info" ||
 			strings.Contains(path, "/static/") {
 			next.ServeHTTP(w, r)