redis, postgres: full nox provider modules — client, tools, provisioner, events

redis provides redis-cache: a real admin client speaking RESP over a raw socket
(node:net, no deps); provisioner makes a keyspace-scoped ACL user per grant.
postgres provides postgres-database: admin client executing through psql (the
consistent shell-out port, like minio's mc), full DDL for create/drop database+
role, a CSV row parser, read-only query tool. Both emit
module.<x>.<thing>.provisioned/.deprovisioned from the provisioner. Both
typecheck; manifests parse.

modules/redis/module.json

@@ -10,6 +10,10 @@
   "capabilities": [
     "container-runtime"
   ],
+  "emits": [
+    "module.redis.cache.provisioned",
+    "module.redis.cache.deprovisioned"
+  ],
   "serves": {
     "redis-cache": {}
   },
@@ -20,7 +24,8 @@
     "redis-cache": "/var/lib/redis-module/grants"
   },
   "own-secrets": {
-    "default": "/var/lib/redis-module/default.secret"
+    "default": "/var/lib/redis-module/default.secret",
+    "broker": "/var/lib/redis-module/broker"
   },
   "listens": [
     {