Phase 1 scaffold: auth for all apps

- Backend: Fastify with two listeners (public + internal), routes, services, DB migration + seed
- client_app: Flutter with BLoC, all auth screens (welcome, display name, register, OTP, force-register)
- mitra_app: Flutter with BLoC, OTP-only login
- control_center: React + Vite, email/password login, mitra/user management, anonymity settings
- Docs: phase1 plan, API contract, client app mockup
- CLAUDE.md and shared memory for all subprojects

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

backend/src/services/mitra.service.js

@@ -0,0 +1,63 @@
+import { getDb } from '../db/client.js'
+
+const sql = getDb()
+
+export const getMitraByFirebaseUid = async (firebase_uid) => {
+  const [mitra] = await sql`
+    SELECT id, display_name, phone, is_active, created_at
+    FROM mitras
+    WHERE firebase_uid = ${firebase_uid}
+  `
+  return mitra
+}
+
+export const getMitraByPhone = async (phone) => {
+  const [mitra] = await sql`
+    SELECT id, display_name, phone, is_active, firebase_uid, created_at
+    FROM mitras
+    WHERE phone = ${phone}
+  `
+  return mitra
+}
+
+export const setMitraFirebaseUid = async (id, firebase_uid) => {
+  await sql`
+    UPDATE mitras SET firebase_uid = ${firebase_uid} WHERE id = ${id}
+  `
+}
+
+export const createMitra = async ({ phone, display_name }) => {
+  const [mitra] = await sql`
+    INSERT INTO mitras (phone, display_name, is_active)
+    VALUES (${phone}, ${display_name}, false)
+    RETURNING id, phone, display_name, is_active, created_at
+  `
+  return mitra
+}
+
+export const updateMitraStatus = async (id, is_active) => {
+  const [mitra] = await sql`
+    UPDATE mitras SET is_active = ${is_active}
+    WHERE id = ${id}
+    RETURNING id, is_active
+  `
+  if (!mitra) throw Object.assign(new Error('Mitra not found'), { code: 'NOT_FOUND', statusCode: 404 })
+  return mitra
+}
+
+export const listMitras = async ({ page = 1, limit = 20, is_active }) => {
+  const offset = (page - 1) * limit
+  const conditions = is_active !== undefined
+    ? sql`WHERE is_active = ${is_active}`
+    : sql``
+
+  const items = await sql`
+    SELECT id, phone, display_name, is_active, created_at
+    FROM mitras
+    ${conditions}
+    ORDER BY created_at DESC
+    LIMIT ${limit} OFFSET ${offset}
+  `
+  const [{ count }] = await sql`SELECT COUNT(*) FROM mitras ${conditions}`
+  return { items, total: Number(count), page, limit }
+}