Add self-hosted auth, admin API, and owner web dashboard

- Replace Clerk with self-hosted JWT auth (register/login/verify, bcrypt
  passwords, Gmail OTP with console fallback)
- Add lib/db.ts pg pool + transaction helpers; seed script migrates legacy
  Clerk-era schema (drop clerk_id, enforce UUID ids and unique email)
- Add owner-gated admin API: stats, users, drivers CRUD, rides
- Add dashboard/ Vite React owner dashboard (login, overview, users,
  fleet, rides) with dev-server proxy to avoid Expo CORS middleware
- Add scripts/set-owner.mjs for role management

app/(api)/ride/[id]+api.ts

@@ -1,11 +1,11 @@
-import { neon } from "@neondatabase/serverless";
+import { requireAuth } from "@/lib/jwt";
+import { sql } from "@/lib/db";
 
 export async function GET(request: Request, { id }: { id: string }) {
-  if (!id)
-    return Response.json({ error: "Missing required fields" }, { status: 400 });
+  const auth = requireAuth(request);
+  if ("error" in auth) return auth.error;
 
   try {
-    const sql = neon(`${process.env.DATABASE_URL}`);
     const response = await sql`
         SELECT
             rides.ride_id,
@@ -19,7 +19,7 @@ export async function GET(request: Request, { id }: { id: string }) {
             rides.fare_price,
             rides.payment_status,
             rides.created_at,
-            'driver', json_build_object(
+            json_build_object(
                 'driver_id', drivers.id,
                 'first_name', drivers.first_name,
                 'last_name', drivers.last_name,
@@ -33,7 +33,7 @@ export async function GET(request: Request, { id }: { id: string }) {
         INNER JOIN
             drivers ON rides.driver_id = drivers.id
         WHERE 
-            rides.user_id = ${id}
+            rides.user_id = ${auth.userId}
         ORDER BY 
             rides.created_at DESC;
         `;

app/(api)/ride/create+api.ts

@@ -1,6 +1,10 @@
-import { neon } from "@neondatabase/serverless";
+import { requireAuth } from "@/lib/jwt";
+import { sql } from "@/lib/db";
 
 export async function POST(request: Request) {
+  const auth = requireAuth(request);
+  if ("error" in auth) return auth.error;
+
   try {
     const body = await request.json();
     const {
@@ -14,7 +18,6 @@ export async function POST(request: Request) {
       fare_price,
       payment_status,
       driver_id,
-      user_id,
     } = body;
 
     if (
@@ -27,8 +30,7 @@ export async function POST(request: Request) {
       !ride_time ||
       !fare_price ||
       !payment_status ||
-      !driver_id ||
-      !user_id
+      !driver_id
     ) {
       return Response.json(
         { error: "Missing required fields" },
@@ -36,8 +38,6 @@ export async function POST(request: Request) {
       );
     }
 
-    const sql = neon(`${process.env.DATABASE_URL}`);
-
     const response = await sql`
         INSERT INTO rides ( 
           origin_address, 
@@ -62,7 +62,7 @@ export async function POST(request: Request) {
           ${fare_price},
           ${payment_status},
           ${driver_id},
-          ${user_id}
+          ${auth.userId}
         )
         RETURNING *;
         `;