Migrate codebase from CommonJS to ES Modules

- Convert all require()/module.exports to import/export across 260+ files
- Add "type": "module" to package.json to enable ESM by default
- Add migrations/package.json with "type": "commonjs" to keep db-migrate compatible
- Convert eslint.config.js to ESM with sourceType: "module"
- Replace __dirname/__filename with import.meta.dirname/import.meta.filename
- Replace require.main === module with process.argv[1] === import.meta.filename
- Remove 'use strict' directives (implicit in ESM)
- Convert dynamic require() in switch statements to static import lookup maps
  (dns.js, domains.js, backupformats.js, backupsites.js, network.js)
- Extract self-referencing exports.CONSTANT patterns into standalone const
  declarations (apps.js, services.js, locks.js, users.js, mail.js, etc.)
- Lazify SERVICES object in services.js to avoid circular dependency TDZ issues
- Add clearMailQueue() to mailer.js for ESM-safe queue clearing in tests
- Add _setMockApp() to ldapserver.js for ESM-safe test mocking
- Add _setMockResolve() wrapper to dig.js for ESM-safe DNS mocking in tests
- Convert backupupload.js to use dynamic imports so --check exits before
  loading the module graph (which requires BOX_ENV)
- Update check-install to use ESM import for infra_version.js
- Convert scripts/ (hotfix, release, remote_hotfix.js, find-unused-translations)
- All 1315 tests passing

Migration stats (AI-assisted using Cursor with Claude):
- Wall clock time: ~3-4 hours
- Assistant completions: ~80-100
- Estimated token usage: ~1-2M tokens

Co-authored-by: Cursor <cursoragent@cursor.com>

src/mailserver.js

@@ -1,49 +1,46 @@
-'use strict';
+import assert from 'node:assert';
+import BoxError from './boxerror.js';
+import constants from './constants.js';
+import debugModule from 'debug';
+import * as dns from './dns.js';
+import * as docker from './docker.js';
+import * as domains from './domains.js';
+import eventlog from './eventlog.js';
+import fs from 'node:fs';
+import hat from './hat.js';
+import infra from './infra_version.js';
+import Location from './location.js';
+import locks from './locks.js';
+import * as mail from './mail.js';
+import paths from './paths.js';
+import * as platform from './platform.js';
+import * as reverseProxy from './reverseproxy.js';
+import safe from 'safetydance';
+import services from './services.js';
+import * as settings from './settings.js';
+import shellModule from './shell.js';
+import tasks from './tasks.js';
+import * as users from './users.js';
 
-exports = module.exports = {
+const debug = debugModule('box:mailserver');
+const shell = shellModule('mailserver');
+
+const DEFAULT_MEMORY_LIMIT = 512 * 1024 * 1024;
+
+export {
     restart,
     start,
-
     onDomainAdded,
     onDomainRemoved,
-
     checkCertificate,
-
     getMailAuth,
-
     getLocation,
     startChangeLocation,
     changeLocation,
-
     setLocation,
-
-    DEFAULT_MEMORY_LIMIT: 512 * 1024 * 1024,
+    DEFAULT_MEMORY_LIMIT,
 };
 
-const assert = require('node:assert'),
-    BoxError = require('./boxerror.js'),
-    constants = require('./constants.js'),
-    debug = require('debug')('box:mailserver'),
-    dns = require('./dns.js'),
-    docker = require('./docker.js'),
-    domains = require('./domains.js'),
-    eventlog = require('./eventlog.js'),
-    fs = require('node:fs'),
-    hat = require('./hat.js'),
-    infra = require('./infra_version.js'),
-    Location = require('./location.js'),
-    locks = require('./locks.js'),
-    mail = require('./mail.js'),
-    paths = require('./paths.js'),
-    platform = require('./platform.js'),
-    reverseProxy = require('./reverseproxy.js'),
-    safe = require('safetydance'),
-    services = require('./services.js'),
-    settings = require('./settings.js'),
-    shell = require('./shell.js')('mailserver'),
-    tasks = require('./tasks.js'),
-    users = require('./users.js');
-
 async function createMailConfig(mailFqdn) {
     assert.strictEqual(typeof mailFqdn, 'string');
 
@@ -121,7 +118,7 @@ async function configureMail(mailFqdn, mailDomain, serviceConfig) {
     // mail container uses /app/data for backed up data and /run for restart-able data
 
     const image = infra.images.mail;
-    const memoryLimit = serviceConfig.memoryLimit || exports.DEFAULT_MEMORY_LIMIT;
+    const memoryLimit = serviceConfig.memoryLimit || DEFAULT_MEMORY_LIMIT;
     const cloudronToken = hat(8 * 128), relayToken = hat(8 * 128);
 
     const certificate = await reverseProxy.getMailCertificate();