redis, postgres: full nox provider modules — client, tools, provisioner, events

redis provides redis-cache: a real admin client speaking RESP over a raw socket
(node:net, no deps); provisioner makes a keyspace-scoped ACL user per grant.
postgres provides postgres-database: admin client executing through psql (the
consistent shell-out port, like minio's mc), full DDL for create/drop database+
role, a CSV row parser, read-only query tool. Both emit
module.<x>.<thing>.provisioned/.deprovisioned from the provisioner. Both
typecheck; manifests parse.

modules/postgres/module.json

@@ -10,6 +10,10 @@
   "capabilities": [
     "container-runtime"
   ],
+  "emits": [
+    "module.postgres.database.provisioned",
+    "module.postgres.database.deprovisioned"
+  ],
   "listens": [
     {
       "port": 5432,
@@ -28,7 +32,8 @@
     "postgres-database": "/var/lib/postgres/grants"
   },
   "own-secrets": {
-    "superuser": "/var/lib/postgres/superuser.secret"
+    "superuser": "/var/lib/postgres/superuser.secret",
+    "broker": "/var/lib/postgres/broker"
   },
   "resources": [
     {