feat: add room-planner app — 3-day HK room view with NewBook integration

NewBook-connected daily housekeeping planner. Replaces the hotelhubmodule-housekeeping-dailylist
WordPress plugin. LXC 120 · 10.10.10.120:3080 · slug: room-planner.

- 3-day booking window (yesterday/today/tomorrow) fetched live from NewBook
- Task completion ticks back to NewBook; room status patches NewBook directly
- 23px border sliver CSS system for adjacent-day booking status
- 3-state filter cycling (off→inclusive→exclusive) for categories and flow types
- Stat filters for outstanding tasks and clean/dirty status
- Rolling 48h activity log with checkout/checkin/status/tasks events
- newbook_pings event bus for future NewBook poller integration
- Room modal with permission-gated guest/rate/notes, task checkboxes, status buttons
- Placeholder sections for future linen-count and routine-tasks modules
- Settings page: task type colours, twin/extra-bed detection, category exclusions
- Mobile-first layout (sidebar desktop, compact top bar mobile)

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

frontend/src/components/AuthGate.tsx

@@ -0,0 +1,51 @@
+import { useEffect, useState, createContext, useContext } from 'react'
+import type { User } from '../types'
+
+interface AuthCtx { user: User }
+const Ctx = createContext<AuthCtx | null>(null)
+
+export function useAuth() {
+  const ctx = useContext(Ctx)
+  if (!ctx) throw new Error('useAuth must be used inside AuthGate')
+  return ctx
+}
+
+export default function AuthGate({ children }: { children: React.ReactNode }) {
+  const [user, setUser] = useState<User | null>(null)
+  const [error, setError] = useState<string | null>(null)
+
+  useEffect(() => {
+    fetch('/api/auth/verify?app=room-planner', { credentials: 'include' })
+      .then(r => {
+        if (r.status === 401 || r.status === 403) {
+          window.location.href = `/portal?redirect=${encodeURIComponent(window.location.href)}`
+          return null
+        }
+        if (!r.ok) throw new Error(`Auth check failed: ${r.status}`)
+        return r.json()
+      })
+      .then(data => { if (data) setUser(data.user) })
+      .catch(err => setError(err.message))
+  }, [])
+
+  if (error) {
+    return (
+      <div style={{ padding: 32, color: '#991b1b', fontFamily: 'sans-serif' }}>
+        Authentication error: {error}
+      </div>
+    )
+  }
+
+  if (!user) {
+    return (
+      <div style={{
+        display: 'flex', alignItems: 'center', justifyContent: 'center',
+        height: '100vh', fontFamily: 'sans-serif', color: '#6b7280'
+      }}>
+        Loading…
+      </div>
+    )
+  }
+
+  return <Ctx.Provider value={{ user }}>{children}</Ctx.Provider>
+}