Auth simulation

Coming soon. Will provide /auth/login, /auth/register, /auth/me, /auth/refresh endpoints that issue dummy JWTs — letting prototypes simulate the full login → authenticated screen flow without persistence.