Refactor runtime bootstrap and ship control flows

apps/viewer/src/contractsAuth.ts

@@ -0,0 +1,14 @@
+export interface AuthSessionResponse {
+  userId: string;
+  email: string;
+  roles: string[];
+  accessToken: string;
+  accessTokenExpiresAtUtc: string;
+  refreshToken: string;
+  refreshTokenExpiresAtUtc: string;
+}
+
+export interface ForgotPasswordResponse {
+  accepted: boolean;
+  resetToken?: string | null;
+}