fix auth: register redirect, password reset flow, GHL contact ID, session handling

- Fix register redirect bug where successful signup returned 400 instead
  of redirecting to /account/setup (use isRedirect() to re-throw redirects)
- Add error display to register page and fix Svelte 5 syntax (on:click)
- Add await to Google sign-in on login page and register page
- Fix logout to await signOut and redirect to /
- Implement full password reset flow:
  - Add sendResetPassword callback to auth.ts config
  - Create forgot-password page with email submission
  - Create reset-password page with one-time token validation
  - Guard reset page: redirect to / if no valid token in URL
- Add ghlContactId field to Profile model for future Go High Level integration
- Add Prisma migration for ghl_contact_id column
- Update register test to expect redirect instead of broken 400

src/lib/auth.ts

@@ -1,24 +1,47 @@
-import { betterAuth } from "better-auth";
-import { prismaAdapter } from "better-auth/adapters/prisma";
-import { prisma } from "$lib/db";
-import { sveltekitCookies } from "better-auth/svelte-kit";
-import { getRequestEvent } from "$app/server";
-
+import { betterAuth } from 'better-auth';
+import { prismaAdapter } from 'better-auth/adapters/prisma';
+import { prisma } from '$lib/db';
+import { sveltekitCookies } from 'better-auth/svelte-kit';
+import { getRequestEvent } from '$app/server';
+import { sendMail } from './server/resend';
 
 export const auth = betterAuth({
-    baseURL: process.env.BETTER_AUTH_URL,
-    database: prismaAdapter(prisma, {
-        provider: "postgresql",
-    }),
-    emailAndPassword: {
-        enabled: true,
-    },
-    socialProviders: {
-        google: {
-            prompt: "select_account",
-            clientId: process.env.GOOGLE_CLIENT_ID as string,
-            clientSecret: process.env.GOOGLE_CLIENT_SECRET as string,
-        }
-    },
-    plugins: [sveltekitCookies(getRequestEvent)],
-})
+	baseURL: process.env.BETTER_AUTH_URL,
+	database: prismaAdapter(prisma, {
+		provider: 'postgresql'
+	}),
+	emailVerification: {
+        sendVerificationEmail: async ({ user }) => {
+			void sendMail({
+				to: user.email,
+				templateId: 'email-verification-email',
+				data: {
+					target_email_address: user.email,
+					verification_link: 'https://google.com'
+				}
+			});
+		}
+	},
+	emailAndPassword: {
+		enabled: true,
+		requireEmailVerification: true,
+		sendResetPassword: async ({ user, url }) => {
+			void sendMail({
+				to: user.email,
+				templateId: 'password-reset-email',
+				data: {
+					target_email_address: user.email,
+					reset_link: url
+				}
+			});
+		}
+	},
+	socialProviders: {
+		google: {
+			prompt: 'select_account',
+			clientId: process.env.GOOGLE_CLIENT_ID as string,
+			clientSecret: process.env.GOOGLE_CLIENT_SECRET as string
+		}
+	},
+	plugins: [sveltekitCookies(getRequestEvent)]
+});

src/lib/components/ui/topBar/TopBar.svelte

@@ -17,7 +17,8 @@
 			<a href="/dashboard" class="mx-2">Dashboard</a>
 			<button
 				onclick={async () => {
-					authClient.signOut();
+					await authClient.signOut();
+					window.location.href = '/';
 				}}>Log Out</button
 			>
 		</div>