WorkOS auth shell

Eldar frontend shell

A shadcn-powered Next.js App Router scaffold for the Eldar backend MVP, with a dedicated sign-in route and a protected sidebar layout.

Implementation note
This frontend pass uses the backend-led WorkOS AuthKit session flow.

The backend stores the sealed WorkOS session in an HTTP-only cookie. The frontend keeps only user, organization, and CSRF display state in memory.

Signup, invitations, password reset, provider customization, and webhook sync are intentionally deferred until the core auth/org contracts are proven.