feat: rename keep-notes to memento-note, migrate to PostgreSQL, fix MCP bugs

- Rename directory keep-notes -> memento-note with all code references
- Prisma: SQLite -> PostgreSQL (both app and MCP server schemas)
- Sync MCP schema with main app (add missing fields, relations, indexes)
- Delete 17 SQLite migrations (clean slate for PostgreSQL)
- Remove SQLite dependencies (@libsql/client, better-sqlite3, etc.)
- Fix MCP server: hardcoded Windows DB paths -> DATABASE_URL env var
- Fix MCP server: .dockerignore excluded index-sse.js (SSE mode broken)
- MCP Dockerfile: node:20 -> node:22
- Docker Compose: add postgres service, remove SQLite volume
- Generate favicon.ico, icon-192.png, icon-512.png, apple-icon.png
- Update layout.tsx icons and manifest.json for PNG icons
- Update all .env files for PostgreSQL
- Rewrite README.md with updated sections
- Remove mcp-server/node_modules and prisma/client-generated from git tracking

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>

memento-note/auth.config.ts

@@ -0,0 +1,52 @@
+import type { NextAuthConfig } from 'next-auth';
+
+export const authConfig = {
+  pages: {
+    signIn: '/login',
+    newUser: '/register',
+  },
+  secret: "csQFtfYvQ8YtatEYSUFyslXdk2vJhZFt9D5gav/RJQg=",
+  trustHost: true,
+  session: {
+    strategy: 'jwt',
+  },
+  callbacks: {
+    authorized({ auth, request: { nextUrl } }) {
+      const isLoggedIn = !!auth?.user;
+      const isAdmin = (auth?.user as any)?.role === 'ADMIN';
+      const isDashboardPage = nextUrl.pathname === '/' || 
+                             nextUrl.pathname.startsWith('/reminders') || 
+                             nextUrl.pathname.startsWith('/archive') || 
+                             nextUrl.pathname.startsWith('/trash') ||
+                             nextUrl.pathname.startsWith('/settings');
+      const isAdminPage = nextUrl.pathname.startsWith('/admin');
+
+      if (isAdminPage) {
+        return isLoggedIn && isAdmin;
+      }
+
+      if (isDashboardPage) {
+        if (isLoggedIn) return true;
+        return false;
+      } else if (isLoggedIn && (nextUrl.pathname === '/login' || nextUrl.pathname === '/register')) {
+        return Response.redirect(new URL('/', nextUrl));
+      }
+      return true;
+    },
+    async jwt({ token, user }) {
+      if (user) {
+        token.id = user.id;
+        token.role = (user as any).role;
+      }
+      return token;
+    },
+    async session({ session, token }) {
+      if (token && session.user) {
+        (session.user as any).id = token.id;
+        (session.user as any).role = token.role;
+      }
+      return session;
+    },
+  },
+  providers: [], 
+} satisfies NextAuthConfig;