feat: complete release readiness work

- consolidate API ownership and remove dead vendor code

- add Stripe billing, learning paths, and public CV hardening

- add migration, recovery, security, audit, and browser gates

job-tracker-ui/next.config.js

@@ -2,7 +2,8 @@
 const nextConfig = {
   // The whole app is client-rendered React Router behind auth (see app/page.tsx) -- static
   // export keeps the same "one index.html + JS bundle, served by nginx" deploy as CRA had.
-  output: "export",
+  // `next dev` cannot generate arbitrary optional-catch-all paths under static-export mode.
+  output: process.env.NODE_ENV === "development" ? undefined : "export",
   reactStrictMode: true,
 };