feat: add MFA/TOTP auth, PII encryption, agents/leads/inquiries modules, and comprehensive tests

- Add TOTP-based MFA with setup, verify, disable, backup codes, and challenge flow
- Add PII field encryption middleware with AES-256-GCM and deterministic search hashes
- Add agents, inquiries, and leads domain modules with entities, events, value objects
- Add web dashboard pages for inquiries and leads with detail dialogs
- Add 30+ component tests (valuation, charts, listings, search, providers, UI)
- Add Prisma migrations for encryption hash columns and MFA TOTP support
- Fix all ESLint errors (unused imports, duplicate imports, lint auto-fixes)
- Update dependencies and lock file
- Clean up obsolete exploration/QA docs, add audit documentation

Co-Authored-By: Paperclip <noreply@paperclip.ing>

IMPLEMENTATION_PLAN.md

@@ -307,3 +307,41 @@ TEC-1687 (Dependabot) ────── (independent, P2)
 - **Wave 3-4 tasks are all independent** — can run fully in parallel
 - **Critical path:** TEC-1647/1648/1649 → TEC-1652 → TEC-1662 (bug fixes → E2E → QA update)
 - **Production path:** Wave 1 → Wave 2 → go-live decision
+
+### Milestone 12: CEO Audit — CI Pipeline Fix (Phase 7 Wave 12)
+
+**Goal:** Restore CI pipeline to green. Fix all TypeScript, ESLint, and test failures. Commit outstanding work.
+
+**Wave 12A — Fix CI (Day 1, parallel):**
+1. **[TEC-1898] Fix Prisma 7 migration** (P0, Senior Backend Engineer)
+2. **[TEC-1899] Fix 31 failing unit tests** (P0, QA Engineer)
+3. **[TEC-1900] Fix ESLint errors + commit files** (P0, Senior Backend Engineer, after TEC-1898)
+
+**Wave 12B — Bug Fixes (Days 2-3):**
+4. **[TEC-1649] Login 500→401 fix** (P1, in progress)
+5. **[TEC-1657] Admin audit logging** (P1, todo)
+6. **[TEC-1878] E2E environment** (P1, DevOps Engineer)
+7. **[TEC-1847] React component tests** (P1, QA Engineer)
+
+```
+TEC-1898 (Prisma Fix) ──┬── TEC-1900 (ESLint + Commit)
+TEC-1899 (Test Fixes) ──┘
+TEC-1649 (Login Fix) ─── (independent, in progress)
+TEC-1878 (E2E Env) ────── (independent)
+TEC-1657 (Audit Logs) ─── (independent)
+TEC-1847 (RTL Tests) ──── (independent)
+```
+
+---
+
+## Dependency Map (Wave 12)
+
+| Task            | Depends On        |
+| --------------- | ----------------- |
+| TEC-1898        | None              |
+| TEC-1899        | None              |
+| TEC-1900        | TEC-1898          |
+| TEC-1649        | None              |
+| TEC-1657        | None              |
+| TEC-1878        | None              |
+| TEC-1847        | None              |