fix: Critical auth + ownership + container bugs from audit

feat: Full Clerk Google OAuth + user profiles + combined API/Worker deploy

Phase 1 complete: guided frontend + adversarial API fixes + i18n

feat: complete Phase 2 modules 9-11, fix ledger page SSR rendering, and implement voice note facts reconciliation

module 4-8 done, bugs fixed

module 1,2,3

docker changes

completing day 3

Day 3: legal grounding — curated seeds, pgvector+FTS retrieval, literal-quote verifier, cited route plans

feat(llm): add OpenCode Go (OpenAI-compatible) provider for ingestion

Day 1–2: monorepo scaffold + ingestion→intake→evidence loop