feat(import): harden workbook parser boundaries

packages/db/src/import-dispo-batch.ts

@@ -2,6 +2,7 @@ import { fileURLToPath, pathToFileURL } from "node:url";
 import { resolve } from "node:path";
 import { PrismaClient, StagedRecordStatus } from "@prisma/client";
 import { loadWorkspaceEnv, resolveWorkspacePath } from "./load-workspace-env.js";
+import { assertCapaKrakenDbTarget } from "./safe-destructive-env.js";
 
 loadWorkspaceEnv();
 
@@ -378,6 +379,7 @@ function ensureCommitAllowed(options: ImportDispoBatchOptions, readiness: DispoI
 }
 
 export async function runImportDispoBatch(options: ImportDispoBatchOptions) {
+  assertCapaKrakenDbTarget("db:import:dispo");
   const dispoImport = await loadDispoImportModule();
 
   printWorkbookSources(options);