Add web client and containerized deployment stack

Web client:

- Added React + TypeScript + Vite + Tailwind application in web/.

- Implemented auth, chat list, chat messages, typing indicators, file uploads, and voice recording/playback.

- Added typed API layer, Zustand stores, and realtime websocket hook integration.

Containerization:

- Added backend Dockerfile and project .dockerignore.

- Added web multi-stage Dockerfile with nginx static hosting and API/WS reverse proxy.

- Added full docker-compose stack with postgres, redis, minio, backend, worker, mailpit, and web.

- Added MinIO bucket bootstrap init job and updated README with Docker quick-start.

web/src/store/authStore.ts

@@ -0,0 +1,58 @@
+import { create } from "zustand";
+import { loginRequest, meRequest, refreshRequest } from "../api/auth";
+import type { AuthUser } from "../chat/types";
+
+interface AuthState {
+  accessToken: string | null;
+  refreshToken: string | null;
+  me: AuthUser | null;
+  loading: boolean;
+  setTokens: (accessToken: string, refreshToken: string) => void;
+  login: (email: string, password: string) => Promise<void>;
+  loadMe: () => Promise<void>;
+  refresh: () => Promise<void>;
+  logout: () => void;
+}
+
+const ACCESS_KEY = "bm_access_token";
+const REFRESH_KEY = "bm_refresh_token";
+
+export const useAuthStore = create<AuthState>((set, get) => ({
+  accessToken: localStorage.getItem(ACCESS_KEY),
+  refreshToken: localStorage.getItem(REFRESH_KEY),
+  me: null,
+  loading: false,
+  setTokens: (accessToken, refreshToken) => {
+    localStorage.setItem(ACCESS_KEY, accessToken);
+    localStorage.setItem(REFRESH_KEY, refreshToken);
+    set({ accessToken, refreshToken });
+  },
+  login: async (email, password) => {
+    set({ loading: true });
+    try {
+      const data = await loginRequest(email, password);
+      get().setTokens(data.access_token, data.refresh_token);
+      await get().loadMe();
+    } finally {
+      set({ loading: false });
+    }
+  },
+  loadMe: async () => {
+    const me = await meRequest();
+    set({ me });
+  },
+  refresh: async () => {
+    const token = get().refreshToken;
+    if (!token) {
+      get().logout();
+      return;
+    }
+    const data = await refreshRequest(token);
+    get().setTokens(data.access_token, data.refresh_token);
+  },
+  logout: () => {
+    localStorage.removeItem(ACCESS_KEY);
+    localStorage.removeItem(REFRESH_KEY);
+    set({ accessToken: null, refreshToken: null, me: null });
+  }
+}));