Editor Image AI

Frontend auth now talks to the real backend.

Gmail OAuth login, CSRF bootstrap, cookie-based session restore, and the starter dashboard are now wired to the live NestJS API.