feat: implement auth system, passkeys, and user management

Add PostgreSQL and Redis integration for users and sessions
Implement password and WebAuthn passkey login flows
Add Docker stack, super-admin seeding, and protected routes

app/middleware/auth.ts

@@ -0,0 +1,12 @@
+export default defineNuxtRouteMiddleware(async (to) => {
+  const auth = useAuth()
+  await auth.fetchSession()
+
+  if (!auth.user.value) {
+    return navigateTo('/login')
+  }
+
+  if (to.path !== '/security' && auth.needsOnboarding.value) {
+    return navigateTo('/security')
+  }
+})

app/middleware/guest.ts

@@ -0,0 +1,14 @@
+export default defineNuxtRouteMiddleware(async () => {
+  const auth = useAuth()
+  await auth.fetchSession()
+
+  if (!auth.user.value) {
+    return
+  }
+
+  if (auth.needsOnboarding.value) {
+    return navigateTo('/security')
+  }
+
+  return navigateTo(auth.isSuperAdmin.value ? '/management/users' : '/security')
+})

app/middleware/super-admin.ts

@@ -0,0 +1,16 @@
+export default defineNuxtRouteMiddleware(async () => {
+  const auth = useAuth()
+  await auth.fetchSession()
+
+  if (!auth.user.value) {
+    return navigateTo('/login')
+  }
+
+  if (auth.needsOnboarding.value) {
+    return navigateTo('/security')
+  }
+
+  if (!auth.isSuperAdmin.value) {
+    return navigateTo('/security')
+  }
+})