feat(auth,roles): implement dynamic permission payload, role deletion guard, and user management APIs

feat: implement authentication module with registration, login, verification, and password recovery workflows

docs(swagger): add complete openapi 3.0 path specs and component schemas for all remaining endpoints

fix(api,validation): standardize CrawlScheduleController envelope and enforce validateParams on all route identifiers

fix(security,architecture): harden Helmet CSP, CORS callback, cascade webhook deactivation, and AuthService dependency injection

feat(backend): upgrade data crawler backend with schedule crawl, change detection, and Supabase support