Clerk-ready

Authentication setup placeholder

Add `NEXT_PUBLIC_CLERK_PUBLISHABLE_KEY` and Clerk provider wiring when staging auth is ready. Public foundation routes stay usable while service keys are being created.

Back to app