Phase 1 scaffold: auth for all apps

- Backend: Fastify with two listeners (public + internal), routes, services, DB migration + seed
- client_app: Flutter with BLoC, all auth screens (welcome, display name, register, OTP, force-register)
- mitra_app: Flutter with BLoC, OTP-only login
- control_center: React + Vite, email/password login, mitra/user management, anonymity settings
- Docs: phase1 plan, API contract, client app mockup
- CLAUDE.md and shared memory for all subprojects

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

backend/src/services/roles.service.js

@@ -0,0 +1,7 @@
+import { getDb } from '../db/client.js'
+
+const sql = getDb()
+
+export const listRoles = async () => {
+  return sql`SELECT id, name, permissions, created_at FROM roles ORDER BY name`
+}