feat(zupass): complete GPC proof verification system (#416)

Implements complete Zupass event ticket verification using GPC (General
  Purpose Circuits) proofs with nullifier-based identity tracking. This enables
  privacy-preserving event ticket gating for conversations while supporting
  guest accounts, soft login, and account merging.

  Backend (API):
  - Add GPC proof verification with GPCBoundConfig and GPCRevealedClaims
  - Implement watermark-based proof validation using event-specific secrets
  - Create zupass_nullifier table with composite unique constraint on
    (nullifier_hash, event_slug) to track event-specific identities
  - Add merge service for account consolidation during ticket verification
  - Implement guest user recovery via nullifier matching
  - Add auto-guest-creation during ticket verification for unknown users
  - Refactor auth service: split monolithic service into core types and state
    helpers modules for maintainability
  - Update Rarimo integration to use consistent watermark pattern
  - Add nullifier-based authentication type detection helpers
  - Implement dynamic import workaround for @pcd/gpc broken ESM exports
  - Add shared Zupass event configuration (eventId, signerPublicKey, productIds)
  - Update event_ticket schema: replace ticketId with nullifier_hash column

  Frontend (Agora):
  - Add EventTicketRequirementBanner component with inline verification flow
  - Implement auto-trigger Zupass verification on gated interactions (voting,
    commenting) with automatic retry after successful verification
  - Update authentication store with ticket verification state management
  - Add poll voting and comment submission ticket gating with optimistic UI
    updates and proper error rollback
  - Add settings UI for viewing verified tickets and managing authentication
    methods
  - Implement guest/soft-login upgrade flow with account merge confirmation
  - Add Node.js crypto/fs/path stubs for @pcd/gpc packages in Quasar webpack
    build (required for browser compatibility)
  - Use Parcnet API with ticketProofRequest() helper for proof generation
  - Add event-specific external nullifiers: agora-{eventSlug}-v1

  Database:
  - New table: zupass_nullifier (nullifier_hash, user_id, event_slug,
    created_at, updated_at, deleted_at)
  - Composite unique constraint on (nullifier_hash, event_slug)
  - Index on user_id for efficient reverse lookups
  - Migration V0028: add zupass_nullifier table

  Legal & Documentation:
  - Update privacy policy (last updated 2025/11/11):
    - Add guest account explanation (DID-based device identifier)
    - Document soft login vs hard login distinction
    - Explain Zupass event ticket verification using GPC proofs
    - Add account upgrade/merge policy (guest→soft→hard progression)
    - Clarify data retention: only cryptographic proofs stored, never raw
      identity documents or ticket details
  - Update terms of service:
    - Add Zupass alongside Rarimo as ZKP verification method
    - Update account deletion flow for Rarimo users (nullifier-only proof)
    - Fix typo: "RariMe" → "Rarimo" throughout
  - Update AUTHORS: fix "RariMe SDK" → "Rarimo SDK"

  Infrastructure:
  - Add @pcd/gpc, @pcd/pod, @pcd/pod-pcd packages for proof verification
  - Add @parcnet-js/client-rpc for Parcnet API integration
  - Add ZUPASS_SERVER_URL and ZUPASS_EVENT_* config variables to env.example
  - Update .gitignore to exclude CLAUDE_*.md analysis files
  - Add Quasar webpack configuration for Node.js polyfill stubs

  Architecture:
  - Update all architecture diagrams (drawio files) to reflect new auth flows
  - Add CLAUDE_AUTHENTICATION_SECURITY_ANALYSIS.md documenting security model
  - Add CLAUDE_PLAN_MERGE_AND_RECOVERY.md documenting account merge logic
  - Add CLAUDE_REFACTORING_SUMMARY.md documenting auth service refactoring

  Security model:
  - GPC proofs use 2-tuple classification (signerPublicKey + eventId only)
  - Nullifiers are event-specific via externalNullifier = agora-{eventSlug}-v1
  - Backend validates ALL tuples in membershipLists match expected values
  - Watermark prevents replay attacks across different event contexts
  - Account merging only allowed: guest→verified or soft→hard (never verified→verified)
  - Nullifier tracking prevents double-verification with soft-deleted users

  This implementation enables seamless privacy-preserving event ticket
  requirements with automatic verification flows and guest account management.
  Users can browse as guests, verify for specific events (soft login), or
  create permanent verified accounts (hard login) with all content preserved
  during upgrades.

Author: nicobao

.gitignore

@@ -71,3 +71,10 @@ lerna-debug.log*
 *.vsix
 
 TODO*
+
+#external repo
+zupass
+parcnet-client
+efdevcon-monorepo
+
+CLAUDE_*.md

AUTHORS

@@ -10,7 +10,7 @@ Agora is written by:
 - Takeru Fukushima <takeru.f.2004@gmail.com> (proofread Japanese translations)
 
 With help from many libraries and frameworks including:
-- RariMe SDK
+- Rarimo SDK
 - UCAN
 - WebCrypto API
 - Typescript

doc/direct-anonymous-posting.drawio

@@ -4,7 +4,7 @@
       <root>
         <mxCell id="0" />
         <mxCell id="1" parent="0" />
-        <mxCell id="lZM2KmHgM9Xgh8onh7Ww-1" value="User&#39;s wallet&lt;div&gt;(RariMe or SSI Wallet)&lt;/div&gt;" style="swimlane;whiteSpace=wrap;html=1;startSize=30;" vertex="1" parent="1">
+        <mxCell id="lZM2KmHgM9Xgh8onh7Ww-1" value="User&#39;s wallet&lt;div&gt;(Rarimo or SSI Wallet)&lt;/div&gt;" style="swimlane;whiteSpace=wrap;html=1;startSize=30;" vertex="1" parent="1">
           <mxGeometry x="93.75" y="320" width="142.5" height="150" as="geometry" />
         </mxCell>
         <mxCell id="lZM2KmHgM9Xgh8onh7Ww-2" style="edgeStyle=orthogonalEdgeStyle;rounded=0;orthogonalLoop=1;jettySize=auto;html=1;entryX=0;entryY=0.75;entryDx=0;entryDy=0;startArrow=classic;startFill=1;endArrow=none;endFill=0;" edge="1" parent="1" source="lZM2KmHgM9Xgh8onh7Ww-1" target="lZM2KmHgM9Xgh8onh7Ww-5">
@@ -19,7 +19,7 @@
         <mxCell id="lZM2KmHgM9Xgh8onh7Ww-5" value="Agora" style="shape=document;whiteSpace=wrap;html=1;boundedLbl=1;" vertex="1" parent="1">
           <mxGeometry x="495" y="335" width="120" height="80" as="geometry" />
         </mxCell>
-        <mxCell id="lZM2KmHgM9Xgh8onh7Ww-6" value="User&#39;s wallet&lt;div&gt;(RariMe or SSI Wallet)&lt;/div&gt;" style="swimlane;whiteSpace=wrap;html=1;startSize=30;" vertex="1" parent="1">
+        <mxCell id="lZM2KmHgM9Xgh8onh7Ww-6" value="User&#39;s wallet&lt;div&gt;(Rarimo or SSI Wallet)&lt;/div&gt;" style="swimlane;whiteSpace=wrap;html=1;startSize=30;" vertex="1" parent="1">
           <mxGeometry x="93.75" y="530" width="142.5" height="150" as="geometry" />
         </mxCell>
         <mxCell id="lZM2KmHgM9Xgh8onh7Ww-7" style="edgeStyle=orthogonalEdgeStyle;rounded=0;orthogonalLoop=1;jettySize=auto;html=1;entryX=0;entryY=0.75;entryDx=0;entryDy=0;startArrow=none;startFill=0;endArrow=classic;endFill=1;" edge="1" parent="1" source="lZM2KmHgM9Xgh8onh7Ww-6" target="lZM2KmHgM9Xgh8onh7Ww-10">

doc/mix-account-and-direct-anon-posting.drawio

@@ -19,7 +19,7 @@
         <mxCell id="2zX7negMlNs0xSwpkuFU-5" value="1) Login with email address&amp;nbsp;&lt;span style=&quot;background-color: initial;&quot;&gt;through&amp;nbsp;&lt;/span&gt;&lt;div&gt;&lt;span style=&quot;background-color: initial;&quot;&gt;OAuth2 or local-first auth&lt;/span&gt;&lt;/div&gt;" style="text;html=1;align=center;verticalAlign=middle;resizable=0;points=[];autosize=1;strokeColor=none;fillColor=none;" vertex="1" parent="1">
           <mxGeometry x="185" y="150" width="220" height="40" as="geometry" />
         </mxCell>
-        <mxCell id="2zX7negMlNs0xSwpkuFU-6" value="User&#39;s wallet&lt;div&gt;(RariMe or SSI Wallet)&lt;/div&gt;" style="swimlane;whiteSpace=wrap;html=1;startSize=30;" vertex="1" parent="1">
+        <mxCell id="2zX7negMlNs0xSwpkuFU-6" value="User&#39;s wallet&lt;div&gt;(Rarimo or SSI Wallet)&lt;/div&gt;" style="swimlane;whiteSpace=wrap;html=1;startSize=30;" vertex="1" parent="1">
           <mxGeometry x="93.75" y="320" width="142.5" height="150" as="geometry" />
         </mxCell>
         <mxCell id="2zX7negMlNs0xSwpkuFU-7" style="edgeStyle=orthogonalEdgeStyle;rounded=0;orthogonalLoop=1;jettySize=auto;html=1;entryX=0;entryY=0.75;entryDx=0;entryDy=0;" edge="1" parent="1" source="2zX7negMlNs0xSwpkuFU-6" target="2zX7negMlNs0xSwpkuFU-10">

doc/modules.drawio

@@ -22,7 +22,7 @@
         <mxCell id="GkvW0CMtngjdruLvTlMq-3" value="Module 3: shared module" style="rounded=0;whiteSpace=wrap;html=1;fillColor=#d5e8d4;strokeColor=#82b366;" vertex="1" parent="1">
           <mxGeometry x="655" y="670" width="120" height="60" as="geometry" />
         </mxCell>
-        <mxCell id="GkvW0CMtngjdruLvTlMq-6" value="Module 6: Integration with RariMe" style="rounded=0;whiteSpace=wrap;html=1;fillColor=#dae8fc;strokeColor=#6c8ebf;" vertex="1" parent="1">
+        <mxCell id="GkvW0CMtngjdruLvTlMq-6" value="Module 6: Integration with Rarimo" style="rounded=0;whiteSpace=wrap;html=1;fillColor=#dae8fc;strokeColor=#6c8ebf;" vertex="1" parent="1">
           <mxGeometry x="655" y="400" width="120" height="60" as="geometry" />
         </mxCell>
         <mxCell id="GkvW0CMtngjdruLvTlMq-7" value="Module 7: Integration with Polis" style="rounded=0;whiteSpace=wrap;html=1;fillColor=#dae8fc;strokeColor=#6c8ebf;" vertex="1" parent="1">
@@ -37,13 +37,13 @@
         <mxCell id="GkvW0CMtngjdruLvTlMq-35" value="Module 3: shared module" style="rounded=0;whiteSpace=wrap;html=1;fillColor=#d5e8d4;strokeColor=#82b366;" vertex="1" parent="1">
           <mxGeometry x="150" y="520" width="120" height="60" as="geometry" />
         </mxCell>
-        <mxCell id="GkvW0CMtngjdruLvTlMq-36" value="Module 6: Integration with RariMe" style="rounded=0;whiteSpace=wrap;html=1;fillColor=#dae8fc;strokeColor=#6c8ebf;" vertex="1" parent="1">
+        <mxCell id="GkvW0CMtngjdruLvTlMq-36" value="Module 6: Integration with Rarimo" style="rounded=0;whiteSpace=wrap;html=1;fillColor=#dae8fc;strokeColor=#6c8ebf;" vertex="1" parent="1">
           <mxGeometry x="150" y="280" width="120" height="60" as="geometry" />
         </mxCell>
         <mxCell id="GkvW0CMtngjdruLvTlMq-37" value="Module 3: shared module" style="rounded=0;whiteSpace=wrap;html=1;fillColor=#d5e8d4;strokeColor=#82b366;" vertex="1" parent="1">
           <mxGeometry x="95.61999999999999" y="810" width="228.75" height="310" as="geometry" />
         </mxCell>
-        <mxCell id="GkvW0CMtngjdruLvTlMq-38" value="Module 6: Integration with RariMe" style="rounded=0;whiteSpace=wrap;html=1;fillColor=#dae8fc;strokeColor=#6c8ebf;" vertex="1" parent="1">
+        <mxCell id="GkvW0CMtngjdruLvTlMq-38" value="Module 6: Integration with Rarimo" style="rounded=0;whiteSpace=wrap;html=1;fillColor=#dae8fc;strokeColor=#6c8ebf;" vertex="1" parent="1">
           <mxGeometry x="194.37" y="820" width="120" height="60" as="geometry" />
         </mxCell>
         <mxCell id="GkvW0CMtngjdruLvTlMq-39" value="Module 1: local-first authentication" style="rounded=0;whiteSpace=wrap;html=1;fillColor=#fff2cc;strokeColor=#d6b656;" vertex="1" parent="1">
@@ -64,7 +64,7 @@
         <mxCell id="GkvW0CMtngjdruLvTlMq-44" value="Module 7: Integration with Polis" style="rounded=0;whiteSpace=wrap;html=1;fillColor=#dae8fc;strokeColor=#6c8ebf;" vertex="1" parent="1">
           <mxGeometry x="835" y="665" width="120" height="60" as="geometry" />
         </mxCell>
-        <mxCell id="GkvW0CMtngjdruLvTlMq-45" value="Module 6: Integration with RariMe" style="rounded=0;whiteSpace=wrap;html=1;fillColor=#dae8fc;strokeColor=#6c8ebf;" vertex="1" parent="1">
+        <mxCell id="GkvW0CMtngjdruLvTlMq-45" value="Module 6: Integration with Rarimo" style="rounded=0;whiteSpace=wrap;html=1;fillColor=#dae8fc;strokeColor=#6c8ebf;" vertex="1" parent="1">
           <mxGeometry x="835" y="600" width="120" height="60" as="geometry" />
         </mxCell>
         <mxCell id="GkvW0CMtngjdruLvTlMq-48" value="Module 7: Integration with Polis" style="rounded=0;whiteSpace=wrap;html=1;fillColor=#dae8fc;strokeColor=#6c8ebf;" vertex="1" parent="1">