fix(ci): fix pipeline #366 — web @mosaic/ui build, Dockerfile find bug, event handler types

Three root causes resolved:

1. .woodpecker/web.yml: build-shared step was missing @mosaic/ui build,
   causing 10 test suite failures + 20 typecheck errors (TS2307)

2. apps/orchestrator/Dockerfile: find -o without parentheses only deleted
   last pattern's matches, leaving spec files with test fixture secrets
   that triggered 5 Trivy false positives (3 CRITICAL, 2 HIGH)

3. 9 web files had untyped event handler parameters (e) causing 49 lint
   errors and 19 typecheck errors — added React.ChangeEvent<T> types

Verification: lint 0 errors, typecheck 0 errors, tests 73/73 suites pass

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

.woodpecker/web.yml

@@ -50,6 +50,7 @@ steps:
     commands:
       - *use_deps
       - pnpm --filter "@mosaic/shared" build
+      - pnpm --filter "@mosaic/ui" build
     depends_on:
       - install