feat(db): mesh data model — meshes, members, invites, audit log

- pgSchema "mesh" with 4 tables isolating the peer mesh domain
- Enums: visibility, transport, tier, role
- audit_log is metadata-only (E2E encryption enforced at broker/client)
- Cascade on mesh delete, soft-delete via archivedAt/revokedAt

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

apps/web/src/app/[locale]/auth/layout.tsx

@@ -0,0 +1,35 @@
+import { getTranslation } from "@turbostarter/i18n/server";
+import { Icons } from "@turbostarter/ui-web/icons";
+
+import { pathsConfig } from "~/config/paths";
+import { TurboLink } from "~/modules/common/turbo-link";
+
+export default async function AuthLayout({
+  children,
+}: {
+  children: React.ReactNode;
+}) {
+  const { t } = await getTranslation({ ns: "common" });
+
+  return (
+    <main className="grid h-full w-full flex-1 lg:grid-cols-2">
+      <section className="flex h-full flex-col items-center justify-center p-6 lg:p-10">
+        <header className="text-navy -mt-1 mb-auto flex self-start justify-self-start">
+          <TurboLink
+            href={pathsConfig.index}
+            className="flex shrink-0 items-center gap-3"
+            aria-label={t("home")}
+          >
+            <Icons.Logo className="text-primary h-8" />
+            <Icons.LogoText className="text-foreground h-4" />
+          </TurboLink>
+        </header>
+        <div className="mt-16 mb-auto flex w-full max-w-md flex-col gap-6 pb-16">
+          {children}
+        </div>
+      </section>
+
+      <aside className="bg-muted hidden flex-1 lg:block"></aside>
+    </main>
+  );
+}