fix auth: register redirect, password reset flow, GHL contact ID, session handling

- Fix register redirect bug where successful signup returned 400 instead
  of redirecting to /account/setup (use isRedirect() to re-throw redirects)
- Add error display to register page and fix Svelte 5 syntax (on:click)
- Add await to Google sign-in on login page and register page
- Fix logout to await signOut and redirect to /
- Implement full password reset flow:
  - Add sendResetPassword callback to auth.ts config
  - Create forgot-password page with email submission
  - Create reset-password page with one-time token validation
  - Guard reset page: redirect to / if no valid token in URL
- Add ghlContactId field to Profile model for future Go High Level integration
- Add Prisma migration for ghl_contact_id column
- Update register test to expect redirect instead of broken 400

src/routes/register/+page.svelte

@@ -1,10 +1,18 @@
 <script lang="ts">
 	import Window from '$lib/components/containers/Window.svelte';
 	import { authClient } from '$lib/auth-client';
+	import type { PageProps } from './$types';
+
+	let { form }: PageProps = $props();
 </script>
 
 <Window>
 	<div class="flex flex-col items-start justify-center">
+		{#if form?.error}
+			<div class="mb-4 w-full rounded-lg border border-red-200 bg-red-50 p-3 text-red-700">
+				{form.error}
+			</div>
+		{/if}
 		<form method="POST" class="flex flex-col items-start">
 			<input type="text" name="firstName" placeholder="First Name" required class="mb-2" />
 			<input type="text" name="lastName" placeholder="Last Name" required class="mb-2" />
@@ -18,8 +26,8 @@
 		<p class=" mx-auto my-6 text-center">Or</p>
 		<button
 			class="mx-auto"
-			on:click={async () => {
-				authClient.signIn.social({ provider: 'google', callbackURL: '/account/setup' });
+			onclick={async () => {
+				await authClient.signIn.social({ provider: 'google', callbackURL: '/account/setup' });
 			}}><img src="light/web_light_sq_SU.svg" alt="Sign Up with Google" /></button
 		>
 	</div>