Major Enhancement: NestJS Migration + CASL Authorization + Error Handling

Complete rewrite from Express to NestJS with enterprise-grade features:

## Backend Improvements
- Migrated from Express to NestJS 11.0.1 with TypeScript
- Implemented Prisma ORM 7.3.0 for type-safe database access
- Added CASL authorization system replacing role-based guards
- Created global exception filters with structured logging
- Implemented Auth0 JWT authentication with Passport.js
- Added vehicle management with conflict detection
- Enhanced event scheduling with driver/vehicle assignment
- Comprehensive error handling and logging

## Frontend Improvements
- Upgraded to React 19.2.0 with Vite 7.2.4
- Implemented CASL-based permission system
- Added AbilityContext for declarative permissions
- Created ErrorHandler utility for consistent error messages
- Enhanced API client with request/response logging
- Added War Room (Command Center) dashboard
- Created VIP Schedule view with complete itineraries
- Implemented Vehicle Management UI
- Added mock data generators for testing (288 events across 20 VIPs)

## New Features
- Vehicle fleet management (types, capacity, status tracking)
- Complete 3-day Jamboree schedule generation
- Individual VIP schedule pages with PDF export (planned)
- Real-time War Room dashboard with auto-refresh
- Permission-based navigation filtering
- First user auto-approval as administrator

## Documentation
- Created CASL_AUTHORIZATION.md (comprehensive guide)
- Created ERROR_HANDLING.md (error handling patterns)
- Updated CLAUDE.md with new architecture
- Added migration guides and best practices

## Technical Debt Resolved
- Removed custom authentication in favor of Auth0
- Replaced role checks with CASL abilities
- Standardized error responses across API
- Implemented proper TypeScript typing
- Added comprehensive logging

Co-Authored-By: Claude Sonnet 4.5 <noreply@anthropic.com>

backend/.env

@@ -1,26 +1,33 @@
-# Database Configuration
-DATABASE_URL=postgresql://postgres:changeme@db:5432/vip_coordinator
-
-# Redis Configuration
-REDIS_URL=redis://redis:6379
-
-# Authentication Configuration
-JWT_SECRET=your-super-secure-jwt-secret-key-change-in-production-12345
-SESSION_SECRET=your-super-secure-session-secret-change-in-production-67890
-
-# Google OAuth Configuration (optional for local development)
-GOOGLE_CLIENT_ID=308004695553-6k34bbq22frc4e76kejnkgq8mncepbbg.apps.googleusercontent.com
-GOOGLE_CLIENT_SECRET=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
-GOOGLE_REDIRECT_URI=https://api.bsa.madeamess.online/auth/google/callback
-
-# Frontend URL
-FRONTEND_URL=https://bsa.madeamess.online
-
-# Flight API Configuration
-AVIATIONSTACK_API_KEY=your-aviationstack-api-key
-
-# Admin Configuration
-ADMIN_PASSWORD=admin123
-
-# Port Configuration
+# ============================================
+# Application Configuration
+# ============================================
 PORT=3000
+NODE_ENV=development
+FRONTEND_URL=http://localhost:5173
+
+# ============================================
+# Database Configuration
+# ============================================
+DATABASE_URL="postgresql://postgres:changeme@localhost:5433/vip_coordinator"
+
+# ============================================
+# Redis Configuration (Optional)
+# ============================================
+REDIS_URL="redis://localhost:6379"
+
+# ============================================
+# Auth0 Configuration
+# ============================================
+# Get these from your Auth0 dashboard:
+# 1. Create Application (Single Page Application)
+# 2. Create API
+# 3. Configure callback URLs: http://localhost:5173/callback
+AUTH0_DOMAIN="dev-s855cy3bvjjbkljt.us.auth0.com"
+AUTH0_AUDIENCE="https://vip-coordinator-api"
+AUTH0_ISSUER="https://dev-s855cy3bvjjbkljt.us.auth0.com/"
+
+# ============================================
+# Flight Tracking API (Optional)
+# ============================================
+# Get API key from: https://aviationstack.com/
+AVIATIONSTACK_API_KEY="your-aviationstack-api-key"