add configurable gift menu overlays

Add tenant-scoped gift menu settings, catalog-backed triggers, infinite OBS rendering, and guard assets. Normalize legacy and protobuf gift values for blind-box, battery-tier, and transaction-aware matching.

apps/server-rust/src/repository.rs

@@ -16,6 +16,7 @@ use crate::{
     components::{ComponentInstance, ComponentRegistry},
     db::{ComponentRecord, Db, DbError},
     gift_effect::{GIFT_EFFECT_KIND, GIFT_EFFECT_NAME, GiftEffectSettings},
+    gift_menu::{GIFT_MENU_KIND, GIFT_MENU_NAME, GiftMenuSettings},
     i18n,
     realtime::InMemoryComponentStore,
     song_request::{SONG_REQUEST_KIND, SONG_REQUEST_NAME, SongRequestSettings},
@@ -113,6 +114,22 @@ impl TenantRepository {
                     ],
                 )
                 .await?;
+            let menu_settings = serde_json::to_value(GiftMenuSettings::default())
+                .map_err(|error| RepositoryError::Invalid(error.to_string()))?;
+            transaction
+                .execute(
+                    "INSERT INTO component_instances \
+                     (id,owner_user_id,kind,name,settings,settings_version,enabled) \
+                     VALUES($1,$2,$3,$4,$5,1,true) ON CONFLICT DO NOTHING",
+                    &[
+                        &Uuid::new_v4(),
+                        &tenant.user_id,
+                        &GIFT_MENU_KIND,
+                        &GIFT_MENU_NAME,
+                        &menu_settings,
+                    ],
+                )
+                .await?;
             transaction.commit().await?;
         }
         Ok(())
@@ -148,7 +165,7 @@ impl TenantRepository {
         // Every tenant receives this singleton during registration/startup.
         // Keeping creation internal prevents a second instance from racing the
         // partial unique index and turning a domain conflict into a DB error.
-        if matches!(kind, SONG_REQUEST_KIND | GIFT_EFFECT_KIND) {
+        if matches!(kind, SONG_REQUEST_KIND | GIFT_EFFECT_KIND | GIFT_MENU_KIND) {
             return Err(RepositoryError::Forbidden);
         }
         let runtime = self
@@ -209,7 +226,10 @@ impl TenantRepository {
             .await?
             .ok_or(RepositoryError::NotFound)?
             .get(0);
-        if matches!(kind.as_str(), SONG_REQUEST_KIND | GIFT_EFFECT_KIND) {
+        if matches!(
+            kind.as_str(),
+            SONG_REQUEST_KIND | GIFT_EFFECT_KIND | GIFT_MENU_KIND
+        ) {
             return Err(RepositoryError::Forbidden);
         }
         let changed = transaction