restructure: flatten workspace nesting, move devcontainer to root

- backend/workspaces/backend/ → backend/
- backend/workspaces/frontend/ → frontend/
- backend/.devcontainer/ + .vscode/ → repo root (where VS Code expects them)
- loose scripts/SQL files → scripts/
- replace nested git repo with single repo at project root
- update docker-compose.yml build context and devcontainer.json path
- add root .gitignore

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

frontend/src/hooks.server.ts

@@ -0,0 +1,66 @@
+import { redirect, type Handle, type HandleFetch } from '@sveltejs/kit';
+import { paraglideMiddleware } from '$lib/paraglide/server';
+import { sequence } from '@sveltejs/kit/hooks';
+import { env } from 'process';
+
+const handleParaglide: Handle = ({ event, resolve }) => paraglideMiddleware(event.request, ({ request, locale }) => {
+	event.request = request;
+
+	return resolve(event, {
+		transformPageChunk: ({ html }) => html.replace('%paraglide.lang%', locale)
+	});
+});
+
+
+const userGroup: Handle = async ({ event, resolve }) => {
+	 const auth = event.cookies.get('auth_token');
+
+    if (auth) {
+        try {
+            const response = await fetch('http://localhost:8080/api/users/me', {
+                        headers: { Authorization: auth }
+
+            });
+            if (response.ok) {
+                const user = await response.json();
+                event.locals.user = user;
+            }
+        } catch (error) {
+            console.error('Error fetching user in hook:', error);
+        }
+    }
+
+    return resolve(event);
+};
+
+
+export const handleFetch: HandleFetch = async ({ event, request, fetch }) => {
+    const apiUrl = env.API_INTERNAL_URL || 'http://localhost:8080';
+    const isApi = request.url.startsWith(apiUrl) || request.url.includes('/api/');
+    const isNotLoginTest = !request.url.includes('/api/users/me');
+
+    if (isApi && isNotLoginTest) {
+        const token = event.cookies.get('auth_token');
+
+        if (!token) {
+            throw redirect(302, '/login');
+        }
+
+        // Clone the request first to preserve the body
+        const clonedRequest = request.clone();
+
+        // Create new request with Authorization header and preserved body
+        const modifiedRequest = new Request(clonedRequest, {
+            headers: {
+                ...Object.fromEntries(clonedRequest.headers),
+                'Authorization': token
+            }
+        });
+
+        return fetch(modifiedRequest);
+    }
+
+    return fetch(request);
+};
+
+export const handle = sequence(userGroup, handleParaglide);