Auth flow refactor, project requests, and routing updates

- Add server-side auth token loader (auth.server.ts) with SSR cookie forwarding
- Add project-requests client for explicit/signal/existing issue dispatch
- Refactor auth layout and app layout for SSR auth gating
- Update auth-client and auth-provider for convex token flow
- Extend project-issue primitives with request result schema
- Wire projectIssues backend mutation for request handling
- Update slice-one page and project-workspace hook
- Adjust routes (remove unused), Caddy config, and env templates

packages/auth/src/web/auth-client.ts

@@ -1,8 +1,8 @@
 import { env } from "@code/env/web";
-import { convexClient, crossDomainClient } from "@convex-dev/better-auth/client/plugins";
+import { convexClient } from "@convex-dev/better-auth/client/plugins";
 import { createAuthClient } from "better-auth/react";
 
 export const authClient = createAuthClient({
-  baseURL: env.VITE_CONVEX_SITE_URL,
-  plugins: [convexClient(), crossDomainClient()],
+  baseURL: env.VITE_AUTH_URL,
+  plugins: [convexClient()],
 });

packages/auth/src/web/auth-provider.tsx

@@ -7,8 +7,18 @@ import { authClient } from "./auth-client";
 
 const convex = new ConvexReactClient(env.VITE_CONVEX_URL, { expectAuth: true });
 
-export const WebAuthProvider = ({ children }: { children: ReactNode }) => (
-  <ConvexBetterAuthProvider authClient={authClient} client={convex}>
+export const WebAuthProvider = ({
+  children,
+  initialToken,
+}: {
+  readonly children: ReactNode;
+  readonly initialToken?: string | null;
+}) => (
+  <ConvexBetterAuthProvider
+    authClient={authClient}
+    client={convex}
+    initialToken={initialToken}
+  >
     {children}
   </ConvexBetterAuthProvider>
 );