feat: migrate auth from supabase to better auth (#596)

* feat: add README for @cio/db package and remove existingAccounts.json

* load session, load profile and organization, add create profile hook

* chore: cache session request

The trick was passing all the cookies to the backend. Previously I was only passing the better-auth.session_token and not better-auth.session_data. Read about the difference here https://www.better-auth.com/docs/concepts/cookies#custom-cookies

* feat: login, logout, onboarding, verify email, reset password.

* feat: complete change email and email verification

* feat: standardise how we make rpc calls and create org endpoints

* fix ui errors

* fix: handle potential undefined customerId and standardize avatar URL property

* refactor: standardize custom domain handling and update telegram chat ID references

* chore: add tailwind prefix to @cio/ui

this fixed the media query issues because  @cio/ui classes were overriding this dashboard tailwind build

* chore: clean up org sidebar

* chore: persist mode state

* feat: implement order breadcrumbs

* chore: upgrade to better auth 1.4

* chore: address common auth flow bugs and setup app for others to setup locally.

apps/dashboard/src/routes/org/[slug]/+layout.server.ts

@@ -1,4 +1,18 @@
-export const load = ({ params = { slug: '' } }) => {
+import { env } from '$env/dynamic/private';
+import { getSubdomain } from '$lib/features/app/layout-setup';
+import { redirect } from '@sveltejs/kit';
+
+const APP_SUBDOMAINS = env.PRIVATE_APP_SUBDOMAINS?.split(',') || ['app'];
+
+export const load = async ({ params, url }) => {
+  const subdomain = getSubdomain(url);
+  const isOrgSite = subdomain && !APP_SUBDOMAINS.includes(subdomain);
+
+  // If this is LMS but user is on org site, redirect to LMS
+  if (isOrgSite) {
+    redirect(307, `/lms`);
+  }
+
   return {
     orgName: params.slug
   };