feat: App mobile Expo + API mobile dédiée

memento-mobile/ (Expo + React Native + expo-router):
- Auth: login email/password → Bearer token (expo-secure-store)
- Layout: guard auth → redirect /(auth)/login ou /(tabs)/home
- Tabs: Accueil, Carnets, Recherche, Profil
- Screens: login, home (recent notes + quick actions), notebooks list,
  note viewer (WebView HTML), search (texte), notebook detail, profile
- Design: tokens brand-accent (#A47148), ink, concrete, paper, border
- lib/config.ts: API_URL dev/prod configurable
- lib/api.ts: apiFetch avec Bearer token automatique
- lib/store.ts: Zustand auth store (login/logout/restore)

memento-note/ (API mobile dédiée):
- lib/mobile-auth.ts: createMobileToken / verifyMobileToken (HMAC-SHA256, 90j)
- POST /api/mobile/auth/login: email+password → token + user
- GET /api/mobile/auth/me: valider token, retourner profil
- GET /api/mobile/notebooks: liste carnets avec nb notes
- GET /api/mobile/notes: notes récentes (filtre par carnet optionnel)
- GET /api/mobile/notes/[id]: contenu complet d'une note
- GET /api/mobile/search: recherche fulltext titre+contenu

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>

memento-note/app/api/mobile/notes/[id]/route.ts

@@ -0,0 +1,30 @@
+import { NextRequest, NextResponse } from 'next/server'
+import prisma from '@/lib/prisma'
+import { getMobileUserId } from '@/lib/mobile-auth'
+
+export async function GET(
+  req: NextRequest,
+  { params }: { params: Promise<{ id: string }> }
+) {
+  const userId = getMobileUserId(req)
+  if (!userId) return NextResponse.json({ error: 'Non autorisé' }, { status: 401 })
+
+  const { id } = await params
+
+  const note = await prisma.note.findFirst({
+    where: { id, userId, trashedAt: null },
+    select: {
+      id: true,
+      title: true,
+      content: true,
+      updatedAt: true,
+      createdAt: true,
+      color: true,
+      notebook: { select: { id: true, name: true } },
+    },
+  })
+
+  if (!note) return NextResponse.json({ error: 'Note introuvable' }, { status: 404 })
+
+  return NextResponse.json({ note })
+}

memento-note/app/api/mobile/notes/route.ts

@@ -0,0 +1,43 @@
+import { NextRequest, NextResponse } from 'next/server'
+import prisma from '@/lib/prisma'
+import { getMobileUserId } from '@/lib/mobile-auth'
+
+export async function GET(req: NextRequest) {
+  const userId = getMobileUserId(req)
+  if (!userId) return NextResponse.json({ error: 'Non autorisé' }, { status: 401 })
+
+  const { searchParams } = new URL(req.url)
+  const notebookId = searchParams.get('notebookId')
+
+  const notes = await prisma.note.findMany({
+    where: {
+      userId,
+      trashedAt: null,
+      ...(notebookId ? { notebookId } : {}),
+    },
+    select: {
+      id: true,
+      title: true,
+      updatedAt: true,
+      color: true,
+      notebook: { select: { name: true } },
+    },
+    orderBy: { updatedAt: 'desc' },
+    take: 50,
+  })
+
+  const notebookName = notebookId
+    ? (await prisma.notebook.findUnique({ where: { id: notebookId }, select: { name: true } }))?.name
+    : undefined
+
+  return NextResponse.json({
+    notes: notes.map((n) => ({
+      id: n.id,
+      title: n.title,
+      updatedAt: n.updatedAt,
+      color: n.color,
+      notebookName: n.notebook?.name,
+    })),
+    ...(notebookName ? { notebookName } : {}),
+  })
+}