feat(backend): add JWT authentication, RBAC and consent/audit services

Add signup/signin with backend-issued JWT (Argon2 passwords in SurrealDB), role-based authorization policies, per-user data access levels, consent register and read audit log. Protect user endpoints and record sensitive reads.

backend/Application/Dtos/AuthDtos.cs

@@ -0,0 +1,18 @@
+namespace TarninaHub.Application.Dtos;
+
+public sealed record RegisterRequest(string Phone, string? Email, string Password);
+
+public sealed record LoginRequest(string Phone, string Password);
+
+public sealed record UserResponse(
+    string Id,
+    string Phone,
+    string? Email,
+    string Role,
+    string? OrganizationId);
+
+public sealed record TokenResponse(
+    string AccessToken,
+    string TokenType,
+    DateTimeOffset ExpiresAt,
+    UserResponse User);

backend/Application/Dtos/ConsentDtos.cs

@@ -0,0 +1,11 @@
+namespace TarninaHub.Application.Dtos;
+
+public sealed record GrantConsentRequest(string Scope, DateTimeOffset? ExpiresAt);
+
+public sealed record ConsentResponse(
+    string Id,
+    string UserId,
+    string Scope,
+    DateTimeOffset GrantedAt,
+    DateTimeOffset? ExpiresAt,
+    DateTimeOffset? RevokedAt);