feat(saas): full SquareMCP SaaS platform v1

- JWT auth with bcrypt password hashing, cookie sessions, forgot/reset password
- Per-user encrypted credential storage (Redis + AES-256-GCM) for all 9 platforms
- Usage tracking with monthly limits per plan (free/starter/growth/enterprise)
- Invoice generation and retrieval (admin + user views)
- Admin panel with customer listing (role-based access)
- Web app UI at app.squaremcp.com — login, dashboard, connections, usage, invoices
- Unified auth middleware: API key, OAuth Bearer, and JWT cookie support
- Facebook Graph API fixes: published_posts endpoint, photo/video post support
- TikTok sandbox compliance: SELF_ONLY privacy for unaudited apps
- URL verification files for TikTok app review

product/site/squaremcp-k8s-ingress.yaml

@@ -15,7 +15,7 @@ spec:
     spec:
       containers:
         - name: squaremcp-site
-          image: localhost:32000/squaremcp-site:latest
+          image: localhost:32000/squaremcp-site@sha256:395e736f1899ce0f2402e34caa95359e2eb54b5424318cf8139982e66b35a974
           imagePullPolicy: Always
           ports:
             - containerPort: 8080
@@ -90,8 +90,33 @@ spec:
                 name: squaremcp-site
                 port:
                   number: 80
+    - host: tiktok.squaremcp.com
+      http:
+        paths:
+          - path: /auth/tiktok
+            pathType: Prefix
+            backend:
+              service:
+                name: hermes-mcp
+                port:
+                  number: 3456
+          - path: /api/pilot-request
+            pathType: Prefix
+            backend:
+              service:
+                name: hermes-mcp
+                port:
+                  number: 3456
+          - path: /
+            pathType: Prefix
+            backend:
+              service:
+                name: squaremcp-site
+                port:
+                  number: 80
   tls:
     - hosts:
         - squaremcp.com
         - www.squaremcp.com
+        - tiktok.squaremcp.com
       secretName: squaremcp-tls