feat: add authenticated admin shell

apps/web/src/services/auth-service.js

@@ -0,0 +1,24 @@
+const apiBaseUrl = import.meta.env?.VITE_API_BASE_URL ?? '/api/v1';
+
+async function request(path, options = {}) {
+  const response = await fetch(`${apiBaseUrl}${path}`, {
+    credentials: 'include',
+    ...options,
+    headers: { 'content-type': 'application/json', ...options.headers },
+  });
+  const payload = await response.json().catch(() => null);
+  if (!response.ok) throw new Error(payload?.error?.message ?? 'Authentication request failed.');
+  return payload?.data;
+}
+
+export function login(email, password) {
+  return request('/auth/login', { method: 'POST', body: JSON.stringify({ email, password }) });
+}
+
+export function getCurrentPrincipal() {
+  return request('/auth/me');
+}
+
+export function logout(csrfToken) {
+  return request('/auth/logout', { method: 'POST', headers: { 'x-csrf-token': csrfToken } });
+}