feat: wire frontend pages to tRPC APIs

- Add hooks (useAuth, useSubscription, useNotifications) for real API data
- Add auth service (login/signup) with password hashing and session support
- Replace stub auth with real tRPC calls in login/signup/onboarding pages
- Replace mock dashboard data with real API data from hooks
- Create service pages: DarkWatch, VoicePrint, SpamShield, HomeTitle, RemoveBrokers, Settings
- Update Navbar, TopBar, Sidebar with real user data and correct routes
- Add passwordHash field to users schema for credential auth
- Fix tests to work with real hooks (mock tRPC/hooks)

web/.gitignore

@@ -7,8 +7,8 @@ dist
 app.config.timestamp_*.js
 
 # Environment
-.env
-.env*.local
+.env*
+!.env.example
 
 # dependencies
 /node_modules
@@ -29,3 +29,4 @@ gitignore
 # System Files
 .DS_Store
 Thumbs.db
+