Fix all auth edge cases: proxy blocks+redirects properly, auth pages redirect if logged in, loading state prevents form flash, callback honors ?next param

Fix auth redirect URLs: use NEXT_PUBLIC_SITE_URL instead of window.location.origin (fixes localhost in verification emails)

Fix: add forgot password + magic link, /privacy, /terms, fix all # links, extension upgrade banner on limit

v3: All missing features — auth callback, settings, PDF export, email (Resend), JWT auth, /api/history, SaulLM integration, extension icons, Supabase 0.10 breaking changes, Stripe v22

v2: Fix all versions + minimal UI redesign (no gradients, clean layout)

🛡️ ClauseGuard v1.0 — Full codebase: Extension + Website + API + ML