Authentication & authorization

Roles, permissions, session tokens, and demo login for admin, expert, support, and customer accounts.

Demo login: POST /api/auth/login with seeded emails (admin@skincare-clinic.local, expert@skincare-clinic.local, demo@example.com).