feat: wire frontend pages to tRPC APIs

- Add hooks (useAuth, useSubscription, useNotifications) for real API data
- Add auth service (login/signup) with password hashing and session support
- Replace stub auth with real tRPC calls in login/signup/onboarding pages
- Replace mock dashboard data with real API data from hooks
- Create service pages: DarkWatch, VoicePrint, SpamShield, HomeTitle, RemoveBrokers, Settings
- Update Navbar, TopBar, Sidebar with real user data and correct routes
- Add passwordHash field to users schema for credential auth
- Fix tests to work with real hooks (mock tRPC/hooks)

web/.env.example

@@ -1,5 +1,13 @@
 DATABASE_URL="postgresql://postgres:postgres@localhost:5432/shieldai"
 
+## Clerk Authentication Configuration
+# Get these from https://clerk.com
+CLERK_SECRET_KEY=sk_test_your_clerk_secret_key
+VITE_CLERK_PUBLISHABLE_KEY=pk_test_your_clerk_publishable_key
+
+DATABASE_URL=libsql://your-database-url.turso.io
+DATABASE_AUTH_TOKEN=your-turso-auth-token
+
 # Stripe (get test keys from https://dashboard.stripe.com/test/apikeys)
 STRIPE_SECRET_KEY="sk_test_..."
 STRIPE_WEBHOOK_SECRET="whsec_..."