refactor(global-variables): strip remaining any from adminRoutes + resolver (types-only)

[mmcintosh]

Description

Follow-up to the auth fix (#1024, which was intentionally "Split scope"): types the adminRoutes surface and variable-resolver.ts that the security PR deferred so the security change stayed reviewable. Types-only — no behavior change (resolver test 13/13, tsc clean).

Stacked PR: based on fix/global-variables-auth so the diff shows only the typing changes. Please merge/retarget after #1024 lands (I'll retarget to main then).

Changes

• adminRoutes typed new Hono<{ Bindings; Variables }>() — removes every c: any/(c: any, next: any) (same pattern as apiRoutes in fix(global-variables): require auth on the /api/global-variables routes #1024). The plugin-active gate returns next() to satisfy noImplicitReturns.
• Row projections typed — PluginSettingsRow replaces .first() as any; parsed plugin settings typed as GvSettings; the admin variable list typed FormattedVariable[] end-to-end into renderAdminPage.
• variable-resolver.ts — db: any → D1Database; the recursive resolveVariablesInObject / resolveContentVariables any → unknown; the row read typed via .all<{ key; value }>() (drops the (row as any) casts).
• install/uninstall — context typed (the SDK types it unknown) via a minimal LifecycleContext narrowing.

Net: plugin any count 26 → 2.

Deferred (with reason)

The content:read hook keeps data: any, context: any (the only remaining 2). Its typed payload is ContentEventPayload (content at .data), but the handler treats data as the content itself and reads context.context.env.DB — and the event is currently reserved/unwired (no dispatch site). Reconciling that is a behavior change, out of scope for a types-only PR; flagged in an in-code note.

Testing

tsc --noEmit clean for the plugin and project-wide (external callers — api-content-crud, core-plugins/index, the resolver test — all still compile against the stricter unknown). global-variables-resolver.test.ts 13/13.

Unit Tests

• All unit tests passing (no new tests — types-only refactor)

E2E Tests

• N/A

Screenshots/Videos

N/A — no behavior/UI change.

Checklist

• Code follows project conventions
• Type checking passes
• No console errors or warnings
• Documentation updated (if needed) — N/A