justforcums

Authentication foundation

Phase 3 wires Telegram bootstrap, local credentials, RBAC, protected routes, JWT sessions, device tracking, and refresh-token rotation.