Implement Phase 1 foundation: monorepo, database, auth, CI

[fusion94]

Summary

• Scaffold npm workspaces monorepo with shared Zod schemas, Fastify API, and Vite + React frontend
• Set up SQLite database with Drizzle ORM (6 tables, FTS5 search, WAL mode) and realistic seed data
• Implement JWT authentication with access/refresh token rotation and reuse detection
• Add GitHub Actions CI pipeline and local development workflow tooling

Changes

• monorepo: Root workspace config with TypeScript 5.7, ESLint 9 flat config, Prettier, Vitest
• packages/shared: Zod validation schemas, inferred TypeScript types, and constants for all entities (wines, bottles, tasting notes, storage locations, users, auth)
• apps/api: Fastify 5 server with CORS, Zod type provider, pino logging, graceful shutdown
• apps/api/db: Drizzle ORM schema for 6 tables with indexes, FTS5 virtual table with sync triggers, migration runner, seed script (~50 wines, ~130 bottles, ~30 tasting notes)
• apps/api/auth: @fastify/jwt plugin with access (15min) and refresh (7d) namespaces, bcrypt password hashing, refresh token rotation with reuse detection, requireAuth/requireAdmin middleware
• apps/api/routes: Health endpoint (GET /api/health), auth endpoints (login, refresh, logout)
• apps/web: Vite 6 + React 19 placeholder app with API proxy config
• ci: GitHub Actions workflow with lint, typecheck, unit tests, functional tests, and e2e test jobs
• dev workflow: .env.example, updated .gitignore, README with quick start guide and test accounts

Test Plan

• Clone repo, run npm install && cp .env.example .env && npm run db:migrate && npm run db:seed && npm run dev
• Verify curl http://localhost:3001/api/health returns {"status":"ok",...}
• Verify login: curl -X POST http://localhost:3001/api/auth/login -H 'Content-Type: application/json' -d '{"email":"admin@cellarsync.local","password":"adminpassword1"}' returns tokens
• Verify token refresh with returned refresh token returns new token pair
• Verify logout with refresh token returns 204, then refresh with same token returns 401
• Verify http://localhost:5173 loads React app and shows API health status
• Verify npm run lint && npm run typecheck pass with zero errors