fix: use Supabase Auth for real access tokens on login/signup

feat: implement authentication system, add quiz history support, and update API endpoints for material and tutor interactions