authentication
Implement authentication in alta-cancha-fs using Better-Auth. Use whenever adding a protected route, reading session data in a component, adding auth guards or ownership checks to ORPC handlers, or wiring sign-in/sign-up/sign-out flows. Also use when configuring RBAC roles, setting up role-based redirects, or debugging session/auth errors.