Fix all auth edge cases: proxy blocks+redirects properly, auth pages redirect if logged in, loading state prevents form flash, callback honors ?next param

Fix auth redirect URLs: use NEXT_PUBLIC_SITE_URL instead of window.location.origin (fixes localhost in verification emails)

Fix: add forgot password + magic link, /privacy, /terms, fix all # links, extension upgrade banner on limit