fix: resolution of critical blockers (P0/P1/P2 fixes) - async Redis, atomic credit updates, schema compatibility, task event loop safety, rate limits, timezone datetimes

fix: all 9 production audit issues - DEBUG default, delete_account commit, guest session security, GitHub OAuth redirect, unlimited credits sentinel

fix: production readiness, security, performance, and worker refactoring

Fix database deadlocks, timezone cookie offsets, and add WeasyPrint GTK fallback safeguards

feat: replace Firebase with Supabase JWT auth (ES256/JWKS + HS256 fallback)

Support Authorization Bearer token fallback for session verification

Implement guest login bypass endpoint and mock credentials validation

Initialize Archvise API backend for Hugging Face Spaces