fix(auth): merge main and use bcryptjs for login route CI build

Replace native bcrypt with bcryptjs to fix Next.js build failure on
/api/auth/login page data collection. Re-apply login security changes
after merging upstream main per maintainer request.

Co-authored-by: Cursor <cursoragent@cursor.com>

Author: Caneryy

package.json

@@ -39,7 +39,7 @@
     "migrate": "npx tsx src/lib/db/migrate.ts"
   },
   "dependencies": {
-    "bcrypt": "^5.1.1",
+    "bcryptjs": "^2.4.3",
     "@apollo/client": "^3.8.0",
     "@dnd-kit/core": "^6.3.1",
     "@dnd-kit/sortable": "^8.0.0",
@@ -109,7 +109,7 @@
     "@testing-library/jest-dom": "^6.9.1",
     "@testing-library/react": "^16.3.0",
     "@testing-library/user-event": "^14.6.1",
-    "@types/bcrypt": "^5.0.2",
+    "@types/bcryptjs": "^2.4.6",
     "@types/chai": "^5.2.3",
     "@types/d3-array": "^3.2.2",
     "@types/d3-color": "^3.1.3",