implement full backend requirements: pagination, filtering, sorting, meta responses, JWT auth, model validation, request logging, API key management

- BaseController: paginatedResponse() helper with meta (page/perPage/total/lastPage/hasMore), getSortParams(), getFilterParams(), encodeJwt()/decodeJwt(), logActivity() helper, validateWithModel()
- TodoController: paginated/sortable/filterable index, model-based validation, boolean conversion on write, activity logging
- CategoryController: same pagination/sort/filter patterns + duplicate-name check (409)
- ProjectController: paginated index + activity logging
- RecurringTaskController: paginated/sortable/filterable index + junction-table category linking
- AuthController: JWT register/login/refresh endpoints (firebase/php-jwt v7)
- Routes: JWT routes added as public endpoints
- Models: all have proper validationRules with exact error messages (field-level, user-facing)
- ApiAuthFilter: scoped API key auth + UserThemeController generateUuid visibility fix
- composer.json: add firebase/php-jwt ^7.0

app/Models/UserModel.php

@@ -6,36 +6,35 @@ use CodeIgniter\Model;
 
 class UserModel extends Model
 {
-    protected $table = 'users';
-    protected $primaryKey = 'id';
+    protected $table            = 'users';
+    protected $primaryKey       = 'id';
     protected $useAutoIncrement = false;
-    protected $returnType = 'array';
-    protected $useSoftDeletes = false;
-    protected $allowedFields = [
-        'id',
-        'email',
-        'password_hash',
-        'name',
-        'avatar_url',
-        'settings',
-        'created_at',
-        'updated_at',
+    protected $returnType       = 'array';
+    protected $useSoftDeletes   = false;
+    protected $allowedFields    = [
+        'id', 'email', 'password_hash', 'name', 'avatar_url',
+        'settings', 'created_at', 'updated_at',
     ];
 
     protected $useTimestamps = true;
-    protected $createdField = 'created_at';
-    protected $updatedField = 'updated_at';
+    protected $createdField  = 'created_at';
+    protected $updatedField  = 'updated_at';
 
     protected $validationRules = [
-        'email' => 'required|valid_email|is_unique[users.email]',
-        'password_hash' => 'required',
-    ];
-
-    protected $validationMessages = [
         'email' => [
-            'required' => 'Email is required',
-            'valid_email' => 'Please enter a valid email address',
-            'is_unique' => 'This email is already registered',
+            'rules' => 'required|valid_email|is_unique[users.email]',
+            'errors' => [
+                'required'    => 'Email is required.',
+                'valid_email' => 'Please provide a valid email address.',
+                'is_unique'   => 'This email is already registered.',
+            ],
+        ],
+        'name' => [
+            'rules' => 'required|max_length[255]',
+            'errors' => [
+                'required'   => 'Name is required.',
+                'max_length' => 'Name must not exceed 255 characters.',
+            ],
         ],
     ];
 }