feat: admin-configurable FINRA download URL

- Add finra_config singleton table (base_url + updated_at)
- Add getFinraBaseUrl() and setFinraBaseUrl() to admin.ts
  Resolution order: DB config > env FINRA_BASE_URL > built-in default
- Add finraConfig query + finraConfigUpdate mutation to admin tRPC router
- Update FinraIngestService.downloadAndIngestFinra to accept optional baseUrl
  param; falls back to getFinraBaseUrl(db) when omitted
- FinraBulkAdapter resolves URL implicitly via the service (no adapter change)
- Add migration #10 for existing DBs

app/server/src/trpc/router.ts

@@ -14,7 +14,7 @@ import type { ThesisEvent } from '../thesis/ThesisMonitor.ts';
 import type { OptionsUnlockState } from '../options/ConvexityGate.ts';
 import type { XCookieHealth } from '../adapters/XCookieAdapter.ts';
 import { emaFromCandles, rsi as rsiFn, relativeVolume, macd as macdFn } from '../analysis/indicators.ts';
-import { listUsers, resetPassword, gdprExport, queueHealth, resetQueueBackoff, NotOwnerError, listUserSessions, listAuditLog, queueSecFetch, setUserModules, disableUser, enableUser, deleteUser } from '../admin/admin.ts';
+import { listUsers, resetPassword, gdprExport, queueHealth, resetQueueBackoff, NotOwnerError, listUserSessions, listAuditLog, queueSecFetch, setUserModules, disableUser, enableUser, deleteUser, getFinraBaseUrl, setFinraBaseUrl } from '../admin/admin.ts';
 import { restartServers, type RestartTarget } from '../lib/restart.ts';
 import type { LintResult } from '../services/secDataFetcher.ts';
 import { EdgarAdapter } from '../adapters/EdgarAdapter.ts';
@@ -1466,6 +1466,16 @@ const adminRouter = router({
     if (!sent) throw new TRPCError({ code: 'INTERNAL_SERVER_ERROR', message: 'Failed to send test email.' });
     return { ok: true };
   }),
+
+  /** Get FINRA config (admin-only). */
+  finraConfig: adminProcedure.query(({ ctx }) => ({
+    baseUrl: getFinraBaseUrl(ctx.db),
+  })),
+
+  /** Update FINRA download URL (admin-only). */
+  finraConfigUpdate: adminProcedure
+    .input(z.object({ baseUrl: z.string().url() }))
+    .mutation(({ ctx, input }) => setFinraBaseUrl(ctx.db, input.baseUrl)),
 });