feat: wire frontend pages to tRPC APIs

- Add hooks (useAuth, useSubscription, useNotifications) for real API data
- Add auth service (login/signup) with password hashing and session support
- Replace stub auth with real tRPC calls in login/signup/onboarding pages
- Replace mock dashboard data with real API data from hooks
- Create service pages: DarkWatch, VoicePrint, SpamShield, HomeTitle, RemoveBrokers, Settings
- Update Navbar, TopBar, Sidebar with real user data and correct routes
- Add passwordHash field to users schema for credential auth
- Fix tests to work with real hooks (mock tRPC/hooks)

web/src/server/api/routers/user.ts

@@ -1,13 +1,14 @@
 import { wrap } from "@typeschema/valibot";
+import { object, string, minLength, email as emailVal } from "valibot";
 import { TRPCError } from "@trpc/server";
-import { createTRPCRouter, protectedProcedure } from "../utils";
+import { createTRPCRouter, publicProcedure, protectedProcedure } from "../utils";
 import {
   UpdateUserSchema,
   InviteMemberSchema,
   RemoveMemberSchema,
   UpdateRoleSchema,
 } from "../schemas/user";
-import { getUserById, updateUser, deleteUser } from "~/server/services/user.service";
+import { getUserById, updateUser, deleteUser, createUserWithPassword, authenticateUser } from "~/server/services/user.service";
 import {
   getFamilyGroup,
   inviteMember,
@@ -15,7 +16,33 @@ import {
   updateMemberRole,
 } from "~/server/services/family.service";
 
+const LoginSchema = object({
+  email: string([emailVal()]),
+  password: string([minLength(1)]),
+});
+
+const SignupSchema = object({
+  name: string([minLength(1)]),
+  email: string([emailVal()]),
+  password: string([minLength(8)]),
+});
+
 export const userRouter = createTRPCRouter({
+  login: publicProcedure
+    .input(wrap(LoginSchema))
+    .mutation(async ({ input }) => {
+      return authenticateUser(input.email, input.password);
+    }),
+
+  signup: publicProcedure
+    .input(wrap(SignupSchema))
+    .mutation(async ({ input }) => {
+      const user = await createUserWithPassword(input.name, input.email, input.password);
+      const { createSession } = await import("~/server/auth/session");
+      const session = await createSession(user.id);
+      return { user, sessionToken: session.sessionToken };
+    }),
+
   me: protectedProcedure.query(async ({ ctx }) => {
     const user = await getUserById(ctx.user.id);
     return user;