Add missing hasPassword property to user responses

The API contract requires hasPassword in user responses but it was
missing from toUserResponse helper and meAuthStatus handler.

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>

apps/api-server/src/procedures/admin/helpers.ts

@@ -25,6 +25,7 @@ export const toUserResponse = (user: Selectable<Users>) => ({
   emailVerified: user.email_verified_at !== null,
   needsSetup: user.display_name === null,
   isSuperuser: user.is_superuser,
+  hasPassword: user.password_hash !== null,
 });
 
 /** Transform site record to API response format */