M1 — Ash foundations, auth & app shell

Acceptance demo: register a user in the browser, sign out, sign in, and reach an authenticated /app shell that renders the signed-in user via current_scope. Unauthenticated /app redirects to sign-in.

No due date
56% Completed