feat: completely overhaul the auth model

* Cookies are now encrypted JWTs (GHSA-wrqq-v7qw-r5w7)
* Authentication is stored in the SQLite database (auto-migrated)
* Session logic is much cleaner

drizzle/0002_square_bloodstorm.sql

@@ -0,0 +1,8 @@
+CREATE TABLE `users` (
+	`id` text PRIMARY KEY NOT NULL,
+	`sub` text NOT NULL,
+	`caps` integer DEFAULT 0 NOT NULL,
+	`onboarded` integer DEFAULT false NOT NULL
+);
+--> statement-breakpoint
+CREATE UNIQUE INDEX `users_sub_unique` ON `users` (`sub`);