feat: Phase 1 foundation - schema, auth, realtime, shell

- Rewrote Drizzle schema: 20 tables with enums, relations, indexes
- Generated migration with DROP TABLE records (v1 EAV removal)
- Added passkey auth routes (register/login)
- Added requireWorkspaceAccess helper
- Added seedDefaultData for Personal workspace + welcome note
- Updated SSE endpoint for v2 entities + workspace_id filtering
- Created recordActivity helper (insert + pg_notify)
- Updated sidebar: Graph replaces Reports, removed Analytics
- Updated command palette for v2 entities
- Created AGENTS.md with locked contract
- Created llm-wiki scaffold (5 stubs)
- Added inline AGENT INSTRUCTION comments to all 50 API route files
- Fixed globals.css border-border class conflict
- Updated database.ts stub for v1 compatibility

apps/web/lib/auth-config.ts

@@ -3,6 +3,7 @@ import { count, eq } from 'drizzle-orm';
 import type { NextAuthOptions } from 'next-auth';
 import CredentialsProvider from 'next-auth/providers/credentials';
 import { db, users } from '@project-e/db';
+import { seedDefaultData } from './seed';
 
 export const authOptions: NextAuthOptions = {
   session: { strategy: 'jwt' },
@@ -30,6 +31,9 @@ export const authOptions: NextAuthOptions = {
               name: process.env.INITIAL_ADMIN_NAME || email,
               passwordHash: await bcrypt.hash(password, 12),
             }).returning();
+
+            // Seed default workspace + welcome note on first user creation
+            await seedDefaultData();
           }
         }