feat(auth): implement user authentication with JWT and NextAuth

- Added user registration and login functionality with JWT authentication.
- Created auth controller, service, and module in the backend.
- Implemented user model and user products management.
- Integrated NextAuth for session management on the frontend.
- Added middleware for protecting routes and handling public access.
- Updated frontend API routes to include authorization headers.
- Enhanced recipe and user product models to support ownership and visibility.
- Created registration and login pages in the frontend.
- Added necessary types for NextAuth session management.

frontend/app/api/receipt-alias-proxy/route.ts

@@ -1,10 +1,15 @@
 import { NextRequest, NextResponse } from 'next/server';
+import { getAuthHeaders } from '../../../lib/auth-headers';
 
 const API_BASE =
   process.env.NEXT_PUBLIC_API_URL_INTERNAL || 'http://recipe-api:8080';
 
 export async function GET() {
-  const res = await fetch(`${API_BASE}/api/receipt-aliases`, { cache: 'no-store' });
+  const authHeaders = await getAuthHeaders();
+  const res = await fetch(`${API_BASE}/api/receipt-aliases`, {
+    headers: { ...authHeaders },
+    cache: 'no-store',
+  });
   const text = await res.text();
   return new NextResponse(text, {
     status: res.status,
@@ -13,10 +18,11 @@ export async function GET() {
 }
 
 export async function POST(request: NextRequest) {
+  const authHeaders = await getAuthHeaders();
   const body = await request.json();
   const res = await fetch(`${API_BASE}/api/receipt-aliases`, {
     method: 'POST',
-    headers: { 'Content-Type': 'application/json' },
+    headers: { 'Content-Type': 'application/json', ...authHeaders },
     body: JSON.stringify(body),
   });
   const text = await res.text();
@@ -27,9 +33,11 @@ export async function POST(request: NextRequest) {
 }
 
 export async function DELETE(request: NextRequest) {
+  const authHeaders = await getAuthHeaders();
   const id = request.nextUrl.searchParams.get('id');
   const res = await fetch(`${API_BASE}/api/receipt-aliases/${id}`, {
     method: 'DELETE',
+    headers: { ...authHeaders },
   });
   return new NextResponse(null, { status: res.status });
 }