- [x] Add /api/auth/register route
- [x] Implement register controller (bcrypt hashing)
- [x] Update login controller to verify bcrypt password
- [x] Update seed user password (chief123) to bcrypt hash
- [x] bcrypt install verified (require('bcrypt'))
- [ ] Smoke test endpoints (manual):
  - [ ] POST /api/auth/register
  - [x] POST /api/auth/login (should work with chief/chief123)
  - [ ] POST /api/auth/logout
  - [ ] GET /api/auth/session
- [x] Run seed (node seed.js)
- [ ] Start server and quick verify (node server.js then call /api/health)

