fix(otel): consolidate to single OTel SDK init at instrumentation.register hook

All three apps' instrumentation.ts files now call initOtelServerNode directly
instead of initSentryServer/initSentryServerNode, closing the startup window
where @sentry/nextjs auto-instrumentation could send unscrubbed errors before
bindAll() fires. bindOtelInstrumentation no longer calls initOtelServerNode
(SDK init belongs at app boot, binding at request scope). Orphaned sentry/
init-server*.ts files deleted; their package.json subpath exports removed.

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

packages/core-shared/src/instrumentation/di/bind-otel-instrumentation.ts

@@ -3,7 +3,6 @@ import type { Container } from "inversify";
 import { OtelTracer } from "../otel/otel-tracer";
 import { OtelLogger } from "../otel/otel-logger";
 import { OtelMetrics } from "../otel/otel-metrics";
-import { initOtelServerNode } from "../otel/init-server-node";
 import { INSTRUMENTATION_SYMBOLS } from "../symbols";
 import type { ITracer, ILogger, IMetrics } from "../index";
 
@@ -13,24 +12,20 @@ export type BindOtelOpts = {
   release?: string;
 };
 
+/**
+ * Binds OtelTracer, OtelLogger, and OtelMetrics to the DI container.
+ *
+ * NOTE: The OTel NodeSDK is NOT initialized here. It is initialized by each
+ * app's instrumentation.ts `register()` hook (Next.js convention / server-entry
+ * hook for TanStack) so that PII scrub processors are active before the very
+ * first request handler runs — before bindAll() fires. Calling initOtelServerNode
+ * here as well would create a second SDK init path and reintroduce the startup
+ * window vulnerability (C1 fix).
+ */
 export function bindOtelInstrumentation(
   container: Container,
   opts: BindOtelOpts,
 ): { tracer: ITracer; logger: ILogger; metrics: IMetrics } {
-  const environment =
-    process.env["SENTRY_ENVIRONMENT"] ??
-    process.env["VERCEL_ENV"] ??
-    process.env["NODE_ENV"] ??
-    "development";
-  const release = opts.release ?? process.env["VERCEL_GIT_COMMIT_SHA"] ?? "unknown";
-
-  initOtelServerNode({
-    dsn: opts.dsn,
-    serviceName: opts.app,
-    environment,
-    release,
-  });
-
   const tracer = new OtelTracer();
   const logger = new OtelLogger();
   const metrics = new OtelMetrics();