refactor: centralize auth system across all modules

All modules now use the main IAM JWT (ACCESS_TOKEN_SECRET) for authentication,
removing three separate auth systems (hackathon Supabase, hackathon JWT, QR JWT).

Changes:
- hackathon: replace HackathonJwtService with decode_access_token() from imphnen-libs
  - remove entire src/auth/ (Supabase signup/login/GitHub/forgot-reset)
  - remove common/hackathon_jwt.rs, common/supabase_client.rs
  - remove Supabase from HackathonConfig (JWT, GitHub OAuth, Supabase anon/service keys)
  - replace Supabase Storage with MinioService from imphnen-libs
  - all route jwt params removed; hackathon_router takes MinioService instead
- qr: replace QrJwtService with decode_access_token() from imphnen-libs
  - remove entire src/auth/ (register/login/Google OAuth/refresh)
  - remove common/qr_jwt.rs, src/config.rs
  - qr_auth_middleware now lazy-upserts users into QR DB on first access
  - qr_router(pool) — no config needed
- gateway: create MinioService once and pass to hackathon_router; qr_router simplified

Users now register/login via /v1/auth/* and use the same JWT for all endpoints.

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

imphnen-hackathon/src/join_requests/infrastructure/http/routes.rs

@@ -4,11 +4,10 @@ use std::sync::Arc;
 use crate::join_requests::application::join_request_service::JoinRequestServiceImpl;
 use crate::join_requests::domain::service::JoinRequestService;
 use crate::join_requests::infrastructure::persistence::PostgresJoinRequestRepository;
-use crate::common::hackathon_jwt::HackathonJwtService;
 use crate::middleware::hackathon_auth::hackathon_auth_middleware;
 use super::handlers::*;
 
-pub fn build_join_request_routes(pool: Arc<PgPool>, jwt: Arc<HackathonJwtService>) -> Router {
+pub fn build_join_request_routes(pool: Arc<PgPool>) -> Router {
     let service: Arc<dyn JoinRequestService> = Arc::new(JoinRequestServiceImpl::new(
         Arc::new(PostgresJoinRequestRepository::new(pool.clone())),
     ));
@@ -18,7 +17,6 @@ pub fn build_join_request_routes(pool: Arc<PgPool>, jwt: Arc<HackathonJwtService
         .route("/join-requests/teams/:team_id/pending", get(get_team_join_requests_handler))
         .route("/join-requests/:request_id/respond", post(respond_to_join_request_handler))
         .layer(Extension(service))
-        .layer(Extension(jwt.clone()))
         .layer(Extension(pool))
         .layer(from_fn(hackathon_auth_middleware))
 }