Enable auth-service/api-gateway on production, build their images in CI

packages/shared-types/src/dto/auth.ts

@@ -0,0 +1,25 @@
+export type UserRole = "user" | "admin";
+
+export interface AuthUser {
+  username: string;
+  role: UserRole;
+}
+
+export interface LoginRequest {
+  username: string;
+  password: string;
+}
+
+export interface LoginResponse {
+  user: AuthUser;
+  // The signed JWT. Present in the auth-service/api-gateway wire response
+  // only — the web BFF route that calls this consumes `token` to set an
+  // httpOnly cookie and does NOT forward it into its own browser-facing
+  // response body. Never read this field in client-side/browser code.
+  token: string;
+}
+
+export interface RegisterRequest {
+  username: string;
+  password: string;
+}

packages/shared-types/src/index.ts

@@ -1,3 +1,4 @@
+export * from "./dto/auth";
 export * from "./dto/chat";
 export * from "./dto/session";