feat(web-tanstack): Sentry instrumentation via @sentry/node + @sentry/react + R38 PII test

Adds initSentryServerNode + initSentryClientReact to core-shared
(Vite/non-Next variants of the existing init helpers — same R31/R32/R33
posture, R34/R35/R37 replay defaults). Extends no-sentry.ts to mock
@sentry/node + @sentry/react. Wires the web-tanstack server/client
instrumentation entry hooks and adds the R38 PII test.

Spec deviation: web-tanstack has no vite.config.ts yet (placeholder app
per its package.json). The @sentry/vite-plugin dep is added but unused
until the TanStack Start build is wired in a later plan. A minimal
src/vite-env.d.ts shims ImportMetaEnv for the client entry until the
full Vite types land.

@sentry/node and @sentry/react are added to core-shared as optional
peerDependencies so feature packages don't transitively pull them in;
they're also devDependencies of core-shared for typecheck/test runs.

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>

packages/core-shared/src/instrumentation/sentry/init-server-node.ts

@@ -0,0 +1,40 @@
+// packages/core-shared/src/instrumentation/sentry/init-server-node.ts
+import * as SentryNode from "@sentry/node";
+import { beforeSend, beforeSendTransaction } from "./scrub";
+import type { InitServerOpts } from "./init-server";
+
+/**
+ * Server-side init for non-Next.js runtimes (TanStack Start). Mirrors
+ * init-server.ts but uses @sentry/node directly. R31, R32, R33 still apply.
+ */
+export function initSentryServerNode(opts: InitServerOpts): void {
+  if (!opts.dsn) return;
+
+  const isProd = process.env["NODE_ENV"] === "production";
+  const tracesSampleRate =
+    process.env["SENTRY_TRACES_SAMPLE_RATE"] !== undefined
+      ? Number(process.env["SENTRY_TRACES_SAMPLE_RATE"])
+      : isProd
+        ? 0.1
+        : 1.0;
+
+  const environment =
+    process.env["SENTRY_ENVIRONMENT"] ??
+    process.env["VERCEL_ENV"] ??
+    process.env["NODE_ENV"] ??
+    "development";
+  const release = opts.release ?? process.env["VITE_GIT_COMMIT_SHA"] ?? "unknown";
+
+  type InitOpts = Parameters<typeof SentryNode.init>[0];
+  SentryNode.init({
+    dsn: opts.dsn,
+    environment,
+    release,
+    tracesSampleRate,
+    sendDefaultPii: false, // R31
+    beforeSend: beforeSend as unknown as NonNullable<InitOpts>["beforeSend"], // R32
+    beforeSendTransaction:
+      beforeSendTransaction as unknown as NonNullable<InitOpts>["beforeSendTransaction"], // R33
+    initialScope: { tags: { app: opts.app } },
+  });
+}