Fix .gitignore and add missing authentication source files

This commit fixes overly broad .gitignore patterns that were excluding
important source code files from version control. Previously, wildcard
patterns like *auth*, *token*, *secret*, *connection*, and *credential*
were excluding ALL files containing these words, including critical
application code.

Changes:
- Updated .gitignore with specific patterns for sensitive config files
  (*.json, *.txt, *.yml, *.yaml extensions only)
- Removed broad wildcards that excluded source code files

Added missing source files:
- shared/auth/ (9 files): Complete authentication system
  - JWT handler, middleware, auth service, models, routes
- reports-app/backend/app/routers/auth.py: Authentication API router
- reports-app/backend/app/auth_middleware_wrapper.py: Middleware wrapper
- reports-app/frontend/src/stores/auth.js: Vue.js auth store
- reports-app/frontend/tests/: E2E tests and fixtures for auth
- reports-app/telegram-bot/app/auth/: Telegram auth linking module
- deployment/windows/scripts/Setup-ClaudeAuth.ps1: Windows deployment script
- security/secrets_scanner.py: Security scanning utility

These files are essential for the application to function and should
have been included in the initial commit.

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-Authored-By: Claude <noreply@anthropic.com>

reports-app/frontend/src/stores/auth.js

@@ -0,0 +1,116 @@
+import { defineStore } from "pinia";
+import { ref, computed } from "vue";
+import { apiService } from "../services/api";
+
+export const useAuthStore = defineStore("auth", () => {
+  // State
+  const accessToken = ref(localStorage.getItem("access_token"));
+  const refreshToken = ref(localStorage.getItem("refresh_token"));
+  const user = ref(JSON.parse(localStorage.getItem("user") || "null"));
+  const isLoading = ref(false);
+  const error = ref(null);
+
+  // Getters
+  const isAuthenticated = computed(() => !!accessToken.value);
+  const currentUser = computed(() => user.value);
+
+  // Actions
+  const login = async (credentials) => {
+    isLoading.value = true;
+    error.value = null;
+
+    try {
+      const loginData = {
+        username: credentials.username,
+        password: credentials.password,
+      };
+      
+      const response = await apiService.post("/auth/login", loginData);
+      const { access_token, refresh_token, user: userData } = response.data;
+
+      accessToken.value = access_token;
+      refreshToken.value = refresh_token;
+      user.value = userData;
+
+      localStorage.setItem("access_token", access_token);
+      localStorage.setItem("refresh_token", refresh_token);
+      localStorage.setItem("user", JSON.stringify(userData));
+
+      apiService.defaults.headers.common["Authorization"] = `Bearer ${access_token}`;
+
+      return { success: true };
+    } catch (err) {
+      error.value = err.response?.data?.detail || "Login failed";
+      return { success: false, error: error.value };
+    } finally {
+      isLoading.value = false;
+    }
+  };
+
+  const logout = () => {
+    accessToken.value = null;
+    refreshToken.value = null;
+    user.value = null;
+    error.value = null;
+
+    localStorage.removeItem("access_token");
+    localStorage.removeItem("refresh_token");
+    localStorage.removeItem("user");
+    // Note: selected_company is now per-user and persists across logout/login
+    // It's stored as 'selected_company_${username}' in localStorage
+
+    delete apiService.defaults.headers.common["Authorization"];
+  };
+
+  const refreshAccessToken = async () => {
+    if (!refreshToken.value) {
+      logout();
+      return false;
+    }
+
+    try {
+      const response = await apiService.post("/auth/refresh", {
+        refresh_token: refreshToken.value,
+      });
+
+      const { access_token } = response.data;
+
+      accessToken.value = access_token;
+      localStorage.setItem("access_token", access_token);
+      apiService.defaults.headers.common["Authorization"] = `Bearer ${access_token}`;
+
+      return true;
+    } catch (err) {
+      console.error("Token refresh failed:", err);
+      logout();
+      return false;
+    }
+  };
+
+  const initializeAuth = () => {
+    if (accessToken.value) {
+      apiService.defaults.headers.common["Authorization"] = `Bearer ${accessToken.value}`;
+    }
+  };
+
+  const clearError = () => {
+    error.value = null;
+  };
+
+  initializeAuth();
+
+  return {
+    accessToken,
+    refreshToken,
+    user,
+    isLoading,
+    error,
+    isAuthenticated,
+    currentUser,
+    login,
+    logout,
+    refreshAccessToken,
+    initializeAuth,
+    clearError,
+  };
+});