Merge branch 'wt2': Add auth procedures and password utilities

Integrates extracted auth handlers and Bun-based password hashing:
- Auth procedures moved to individual handler files
- Password hashing using Bun's argon2id (replaces scrypt)
- Password validation with zxcvbn
- Session, cookie, crypto, email, and geo utilities

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>

apps/api-server/src/context.ts

@@ -17,6 +17,10 @@ export interface APIContext {
   allowedOrigins: string[];
   /** Relying party name for WebAuthn */
   rpName: string;
+  /** Request headers (for reading cookies, auth headers) */
+  reqHeaders: Headers;
+  /** Response headers (for setting cookies) */
+  resHeaders: Headers;
 }
 
 /**