feat: complete release readiness work

- consolidate API ownership and remove dead vendor code

- add Stripe billing, learning paths, and public CV hardening

- add migration, recovery, security, audit, and browser gates

job-tracker-ui/src/components/MicrosoftAuthCard.tsx

@@ -38,7 +38,7 @@ export default function MicrosoftAuthCard({ onSignedIn }: { onSignedIn?: () => v
   const [working, setWorking] = useState(false);
   const [pendingToken, setPendingToken] = useState<string | null>(null);
 
-  const clientId = (process.env.REACT_APP_MICROSOFT_CLIENT_ID || "").trim();
+  const clientId = (process.env.NEXT_PUBLIC_MICROSOFT_CLIENT_ID || "").trim();
   const signedIn = Boolean(me?.provider);
   const actionLabel = !signedIn
     ? t("continueWithMicrosoft")