fix(db): phase 4 group 6 — session guard, type safety, SQL filter fixes

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

app/(protected)/supervisor/page.tsx

@@ -5,7 +5,7 @@ import { asAdmin } from '@/lib/db/with-user'
 import { redirect } from 'next/navigation'
 import { getSession } from '@/lib/auth/get-session'
 import { incidents, sites, capaActions, users } from '@/lib/db/schema'
-import { eq, not, and, inArray, sql } from 'drizzle-orm'
+import { eq, not, and, inArray, sql, desc } from 'drizzle-orm'
 import { aliasedTable } from 'drizzle-orm'
 import { StatCard } from '@/components/dashboard/stat-card'
 
@@ -65,7 +65,7 @@ export default async function SupervisorPage() {
       })
       .from(incidents)
       .where(and(eq(incidents.siteId, session.siteId!), not(eq(incidents.status, 'closed'))))
-      .orderBy(sql`${incidents.reportedAt} desc`)
+      .orderBy(desc(incidents.reportedAt))
       .limit(10)
     ),
     asAdmin(db =>