feat: add authentication, user management, and admin features

Added comprehensive authentication and authorization system:

Authentication System:
- Better Auth integration with session management
- Login/logout pages and API routes
- Middleware for route protection
- Auth utilities and client libraries

User Management:
- User list, detail, and invite pages
- User API endpoints (CRUD operations)
- Session management for users
- Profile settings page

Role-Based Access Control:
- Role management pages (list, create, edit)
- Permission system with granular controls
- Role assignment to users
- Role API endpoints

Admin Features:
- Audit log page for tracking system events
- Admin settings page
- Audit service for logging user actions

Additional Features:
- Quotes management pages and components
- SalesBldr API integration
- Email service for notifications

Configuration & Documentation:
- Updated docker-compose.yml
- MCP server configuration (mcp.json)
- CVE-2025-55182 security review documentation
- Standards guide and PRD documents
- Re-enabling authentication documentation

Database Migrations:
- 012: Auth tables (users, sessions, accounts, verifications)
- 013: Role tables (roles, permissions, role_permissions, user_roles)
- 014: Admin settings table

UI Updates:
- Updated dashboard layout
- Enhanced app layout with auth integration

app/api/admin/roles/route.ts

@@ -0,0 +1,80 @@
+import { NextRequest, NextResponse } from "next/server";
+import { Pool } from "pg";
+import { requireAdmin, requireSuperAdmin } from "@/lib/auth-utils";
+
+const pool = new Pool({
+  connectionString: process.env.DATABASE_URL,
+});
+
+// GET /api/admin/roles - List all roles
+export async function GET(request: NextRequest) {
+  const { error } = await requireAdmin();
+  if (error) return error;
+
+  try {
+    const result = await pool.query(`
+      SELECT 
+        r.id, r.name, r.description, r.permissions, r.is_system, r.created_at,
+        COUNT(DISTINCT u.id) as user_count
+      FROM "role" r
+      LEFT JOIN "user" u ON u.role = r.name
+      GROUP BY r.id
+      ORDER BY r.is_system DESC, r.name ASC
+    `);
+
+    return NextResponse.json({ roles: result.rows });
+  } catch (error) {
+    console.error("Error fetching roles:", error);
+    return NextResponse.json(
+      { error: "Failed to fetch roles" },
+      { status: 500 }
+    );
+  }
+}
+
+// POST /api/admin/roles - Create a new role
+export async function POST(request: NextRequest) {
+  const { error } = await requireSuperAdmin();
+  if (error) return error;
+
+  try {
+    const body = await request.json();
+    const { name, description, permissions } = body;
+
+    if (!name) {
+      return NextResponse.json(
+        { error: "Role name is required" },
+        { status: 400 }
+      );
+    }
+
+    // Check if role already exists
+    const existingRole = await pool.query(
+      'SELECT id FROM "role" WHERE name = $1',
+      [name]
+    );
+
+    if (existingRole.rows.length > 0) {
+      return NextResponse.json(
+        { error: "Role with this name already exists" },
+        { status: 409 }
+      );
+    }
+
+    const id = `role_${crypto.randomUUID().replace(/-/g, "").slice(0, 12)}`;
+    const result = await pool.query(
+      `INSERT INTO "role" (id, name, description, permissions, is_system, created_at, updated_at)
+       VALUES ($1, $2, $3, $4, false, NOW(), NOW())
+       RETURNING id, name, description, permissions, is_system, created_at`,
+      [id, name, description || null, JSON.stringify(permissions || {})]
+    );
+
+    return NextResponse.json({ role: result.rows[0] }, { status: 201 });
+  } catch (error) {
+    console.error("Error creating role:", error);
+    return NextResponse.json(
+      { error: "Failed to create role" },
+      { status: 500 }
+    );
+  }
+}