feat: wire real auth — login returns user profile with role from platform, remove mock users and role selector tabs

src/lib/api-client.ts

@@ -21,7 +21,19 @@ const clearTokens = () => {
 };
 
 export const apiClient = {
-    async login(email: string, password: string): Promise<{ accessToken: string; refreshToken: string }> {
+    async login(email: string, password: string): Promise<{
+        accessToken: string;
+        refreshToken: string;
+        user?: {
+            id?: string;
+            email?: string;
+            firstName?: string;
+            lastName?: string;
+            avatarUrl?: string;
+            role?: string;
+            platformRoles?: string[];
+        };
+    }> {
         const response = await fetch(`${API_URL}/auth/login`, {
             method: 'POST',
             headers: { 'Content-Type': 'application/json' },
@@ -33,9 +45,9 @@ export const apiClient = {
             throw new Error(data.message ?? 'Login failed');
         }
 
-        const tokens = await response.json();
-        storeTokens(tokens.accessToken, tokens.refreshToken);
-        return tokens;
+        const data = await response.json();
+        storeTokens(data.accessToken, data.refreshToken);
+        return data;
     },
 
     async graphql<T>(query: string, variables?: Record<string, unknown>): Promise<T> {