Strip sslmode from connection string to fix TLS override

Newer pg versions treat sslmode=require as verify-full, overriding
the programmatic ssl.rejectUnauthorized=false config. Strip sslmode
from the URL and handle SSL entirely via the Pool ssl option.

Made-with: Cursor

src/lib/db.ts

@@ -7,8 +7,10 @@ const globalForPrisma = globalThis as unknown as {
 };
 
 function createPrismaClient() {
+  const url = new URL(process.env.DATABASE_URL!);
+  url.searchParams.delete("sslmode");
   const pool = new pg.Pool({
-    connectionString: process.env.DATABASE_URL,
+    connectionString: url.toString(),
     max: 5,
     ssl: { rejectUnauthorized: false },
   });