Feat: Android-приложение на базе Vue SPA (Capacitor) ...

- Установлен Capacitor: core, CLI, Android platform, Preferences plugin
- Добавлена страница первичной настройки сервера (/mobile-setup) только для мобильного приложения
- Реализовано хранение адреса сервера в нативных Preferences (Capacitor)
- Динамический baseUrl для API-клиента через server-config.js
- Исправлены все auth-редиректы: теперь используют абсолютный URL с учётом serverUrl
- Добавлены мобильные meta-теги в index.html (viewport-fit=cover, theme-color, safe-area)
- CSS: запрет pull-to-refresh, поддержка safe-area-inset, tap-highlight
- Android: adaptive icon из логотипа, тёмный splash screen, разрешён cleartext traffic
- Android: название приложения 'Smart Home', package com.gnexus.shserv
- Скрипты: cap:sync и cap:android для удобной сборки

Refactor: extract shared logger utils, fix edge cases in Pinia/HTTP logging

P2: Vue Client — console logging (HTTP, router, Pinia actions, error handler)

Fix auth session persistence: add credentials:include to fetch and session_start to auth flow ...

- http.js: add credentials: 'include' to fetch() so cookies are sent
  with every API request (fixes /auth/me returning 401 after callback)
- AuthControllerTrait::resolve_user(): ensure session_start() before
  reading
- AuthController::callback(): ensure session_start() before writing

- AuthService::handleCallback(): defer DB token persistence until
  local user ID is resolved; store temp token data in session
- UserResolver: fix lastInsertId() method name, remove avatarUrl()
  call (use profile array instead)

This fixes the loop where user was redirected back to /login after
successful OAuth callback because PHP session cookie was not sent
with the /auth/me request.

Phase 4: Vue client auth store, Bearer token injection, router guards, login page ...

Server:
- AuthControllerTrait now supports both session and Bearer token auth
  (resolves user from Authorization: Bearer header via shserv_sessions)

Vue client:
- Add api/auth.js module for access token management
- Inject Authorization: Bearer header in http.js
- Handle 401 in client.js: clear token + redirect to /auth/login
- New Pinia auth store (stores/auth.js): init, refreshToken, logout, hasPermission
- New usePermission composable
- Router guards: redirect unauthenticated to /login, permission-based route blocking
- New LoginPage.vue with gnexus-auth login button
- AppShell: conditional nav items by permission, user bar with logout
- main.js: initialize auth before mounting app
- MSW mocks: /auth/me, /auth/logout, /auth/refresh
- Fix AppShell.spec.js for Pinia + router setup

All 167 tests pass.

Phase 6: Rename webclient-vue to webclient, match legacy dist structure