feat: auth page redesign and full bug audit fixes

fix: add missing Depends import to billing.py

security: fix ENCRYPTION_KEY default, /verify-payment broken access control, path-traversal in design_name endpoints, /designs header-spoofing

feat: Supabase auth + Razorpay billing + fix API double-URL bug