feat(auth): add email verification to registration flow

- Add email/email_verified/verification_token/verification_token_exp fields
  to app_users PocketBase schema (pb-init-v3.sh)
- Add SMTP env vars to UI service in docker-compose.yml
- New email.ts: raw TLS SMTP mailer via Node tls module, sendVerificationEmail()
- createUser() now takes email param, stores verification token (24h TTL)
- loginUser() throws 'Email not verified' when email_verified is false
- New /verify-email route: validates token, verifies user, auto-logs in
- Login page: email field in register form, check-inbox state after register
- /api/auth/register (iOS): returns { pending_verification, email } instead of token
- Add pb.libnovel.cc and storage.libnovel.cc Caddy virtual hosts for homelab runner
- Add homelab runner docker-compose and libnovel.sh helper script

docker-compose.yml

@@ -267,6 +267,13 @@ services:
       PUBLIC_UMAMI_SCRIPT_URL: "${PUBLIC_UMAMI_SCRIPT_URL}"
       # GlitchTip client + server-side error tracking
       PUBLIC_GLITCHTIP_DSN: "${PUBLIC_GLITCHTIP_DSN}"
+      # Email verification (Resend SMTP — shared with Fider/GlitchTip)
+      SMTP_HOST: "${FIDER_SMTP_HOST}"
+      SMTP_PORT: "${FIDER_SMTP_PORT}"
+      SMTP_USER: "${FIDER_SMTP_USER}"
+      SMTP_PASSWORD: "${FIDER_SMTP_PASSWORD}"
+      SMTP_FROM: "noreply@libnovel.cc"
+      APP_URL: "${ORIGIN}"
     healthcheck:
       test: ["CMD", "wget", "-qO-", "http://127.0.0.1:3000/health"]
       interval: 15s
@@ -432,13 +439,13 @@ services:
       BASE_URL: "${FIDER_BASE_URL}"
       DATABASE_URL: "postgres://${POSTGRES_USER}:${POSTGRES_PASSWORD}@postgres:5432/fider?sslmode=disable"
       JWT_SECRET: "${FIDER_JWT_SECRET}"
-      # Email: noreply mode — emails are suppressed (logged to stdout).
-      # Fider still requires SMTP vars to be non-empty even in noreply mode.
+      # Email: Resend SMTP
       EMAIL_NOREPLY: "noreply@libnovel.cc"
-      EMAIL_SMTP_HOST: "localhost"
-      EMAIL_SMTP_PORT: "25"
-      # Disable outbound email — set real SMTP values to enable.
-      EMAIL_NOREPLY_MODE: "true"
+      EMAIL_SMTP_HOST: "${FIDER_SMTP_HOST}"
+      EMAIL_SMTP_PORT: "${FIDER_SMTP_PORT}"
+      EMAIL_SMTP_USERNAME: "${FIDER_SMTP_USER}"
+      EMAIL_SMTP_PASSWORD: "${FIDER_SMTP_PASSWORD}"
+      EMAIL_SMTP_ENABLE_STARTTLS: "false"
 
   # ─── GlitchTip DB migration (one-shot) ───────────────────────────────────────
   glitchtip-migrate:
@@ -452,8 +459,8 @@ services:
       DATABASE_URL: "postgres://${POSTGRES_USER}:${POSTGRES_PASSWORD}@postgres:5432/glitchtip"
       SECRET_KEY: "${GLITCHTIP_SECRET_KEY}"
       GLITCHTIP_DOMAIN: "${GLITCHTIP_DOMAIN}"
-      EMAIL_URL: "consolemail://"
-      DEFAULT_FROM_EMAIL: "errors@libnovel.cc"
+      EMAIL_URL: "${GLITCHTIP_EMAIL_URL}"
+      DEFAULT_FROM_EMAIL: "noreply@libnovel.cc"
       VALKEY_URL: "redis://valkey:6379/1"
     command: "./manage.py migrate"
     restart: "no"
@@ -473,8 +480,8 @@ services:
       DATABASE_URL: "postgres://${POSTGRES_USER}:${POSTGRES_PASSWORD}@postgres:5432/glitchtip"
       SECRET_KEY: "${GLITCHTIP_SECRET_KEY}"
       GLITCHTIP_DOMAIN: "${GLITCHTIP_DOMAIN}"
-      EMAIL_URL: "consolemail://"
-      DEFAULT_FROM_EMAIL: "errors@libnovel.cc"
+      EMAIL_URL: "${GLITCHTIP_EMAIL_URL}"
+      DEFAULT_FROM_EMAIL: "noreply@libnovel.cc"
       VALKEY_URL: "redis://valkey:6379/1"
       PORT: "8000"
       ENABLE_USER_REGISTRATION: "false"
@@ -497,8 +504,8 @@ services:
       DATABASE_URL: "postgres://${POSTGRES_USER}:${POSTGRES_PASSWORD}@postgres:5432/glitchtip"
       SECRET_KEY: "${GLITCHTIP_SECRET_KEY}"
       GLITCHTIP_DOMAIN: "${GLITCHTIP_DOMAIN}"
-      EMAIL_URL: "consolemail://"
-      DEFAULT_FROM_EMAIL: "errors@libnovel.cc"
+      EMAIL_URL: "${GLITCHTIP_EMAIL_URL}"
+      DEFAULT_FROM_EMAIL: "noreply@libnovel.cc"
       VALKEY_URL: "redis://valkey:6379/1"
       SERVER_ROLE: "worker"