fix(api): allow nest build of program-settings and cleaner replica --check

Cast stored JSON through asSettingsArray so tsc accepts the snapshot payload, and strip Prisma ?schema= from DATABASE_URL before psql.

Co-authored-by: Cursor <cursoragent@cursor.com>

deploy/replicas.env.example

@@ -1,6 +1,8 @@
 # Copy to deploy/replicas.env on the publisher host (gitignored — holds passwords).
 #
-# Every logical-replication subscriber of superadmin_pub, space/comma/newline separated.
+# One DSN per line (or comma). Do not put spaces between URLs.
+# Prefer URI form. Password must not contain @ : / # ? — or URL-encode it.
+# Keyword form (host=...) is OK only because the script splits on newlines, not spaces.
 # The user must be able to run ALTER TABLE (table owner or superuser).
 REPLICA_DSNS="postgresql://USER:PASSWORD@SLAVE_1_IP:5433/superadmin
 postgresql://USER:PASSWORD@SLAVE_2_IP:5432/superadmin"