Fix production demo auth and deployment layout

fix: disable Clerk global guard when DEMO_MODE=true

fix: verify Clerk tokens in production

fix: Critical auth + ownership + container bugs from audit

feat: Full Clerk Google OAuth + user profiles + combined API/Worker deploy