chore: repair pre-existing lint failures blocking the lint gate

- turbo/generators/config.ts used require() inside the reader generator
  action (no-require-imports); use the top-level node:fs imports
- auth authentication.service.ts used a literal self-assertion
  ("users" as "users"); prefer-as-const
- apps/cms lacked web-next's next-env.d.ts triple-slash-reference
  override, and the committed next-env.d.ts now references
  .next/types/routes.d.ts

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>

packages/auth/src/infrastructure/services/authentication.service.ts

@@ -99,7 +99,7 @@ export class AuthenticationService implements IAuthenticationService {
     if (!decoded) throw new Error("Invalid or expired session token");
 
     const userDoc = await payload.findByID({
-      collection: "users" as "users",
+      collection: "users" as const,
       id: decoded.id,
       overrideAccess: true,
     });