feat: add MFA/TOTP auth, PII encryption, agents/leads/inquiries modules, and comprehensive tests

- Add TOTP-based MFA with setup, verify, disable, backup codes, and challenge flow
- Add PII field encryption middleware with AES-256-GCM and deterministic search hashes
- Add agents, inquiries, and leads domain modules with entities, events, value objects
- Add web dashboard pages for inquiries and leads with detail dialogs
- Add 30+ component tests (valuation, charts, listings, search, providers, UI)
- Add Prisma migrations for encryption hash columns and MFA TOTP support
- Fix all ESLint errors (unused imports, duplicate imports, lint auto-fixes)
- Update dependencies and lock file
- Clean up obsolete exploration/QA docs, add audit documentation

Co-Authored-By: Paperclip <noreply@paperclip.ing>

apps/web/components/inquiries/inquiry-detail-dialog.tsx

@@ -0,0 +1,110 @@
+'use client';
+
+import { InquiryStatusBadge } from '@/components/inquiries/inquiry-row';
+import { Button } from '@/components/ui/button';
+import {
+  Dialog,
+  DialogContent,
+  DialogDescription,
+  DialogFooter,
+  DialogHeader,
+  DialogTitle,
+} from '@/components/ui/dialog';
+import { useMarkInquiryRead } from '@/lib/hooks/use-inquiries';
+import type { InquiryReadDto } from '@/lib/inquiries-api';
+
+interface InquiryDetailDialogProps {
+  inquiry: InquiryReadDto | null;
+  open: boolean;
+  onOpenChange: (open: boolean) => void;
+}
+
+export function InquiryDetailDialog({ inquiry, open, onOpenChange }: InquiryDetailDialogProps) {
+  const markAsRead = useMarkInquiryRead();
+
+  if (!inquiry) return null;
+
+  const handleMarkRead = () => {
+    markAsRead.mutate(inquiry.id, {
+      onSuccess: () => {
+        onOpenChange(false);
+      },
+    });
+  };
+
+  const formattedDate = new Date(inquiry.createdAt).toLocaleDateString('vi-VN', {
+    weekday: 'long',
+    day: '2-digit',
+    month: '2-digit',
+    year: 'numeric',
+    hour: '2-digit',
+    minute: '2-digit',
+  });
+
+  return (
+    <Dialog open={open} onOpenChange={onOpenChange}>
+      <DialogContent className="max-w-md sm:max-w-lg">
+        <DialogHeader>
+          <DialogTitle>Chi tiết liên hệ</DialogTitle>
+          <DialogDescription>
+            {inquiry.listingTitle}
+          </DialogDescription>
+        </DialogHeader>
+
+        <div className="space-y-4 py-2">
+          {/* Contact info */}
+          <div className="rounded-lg border p-4 space-y-2">
+            <div className="flex items-center justify-between">
+              <span className="text-sm font-medium">{inquiry.userName}</span>
+              <InquiryStatusBadge isRead={inquiry.isRead} />
+            </div>
+            <div className="space-y-1 text-sm text-muted-foreground">
+              <p>SĐT: {inquiry.phone ?? inquiry.userPhone}</p>
+              <p>Ngày gửi: {formattedDate}</p>
+            </div>
+          </div>
+
+          {/* Message */}
+          <div className="space-y-1.5">
+            <h4 className="text-sm font-medium">Nội dung</h4>
+            <div className="rounded-lg bg-muted p-3 text-sm leading-relaxed">
+              {inquiry.message}
+            </div>
+          </div>
+
+          {/* Quick actions */}
+          <div className="space-y-1.5">
+            <h4 className="text-sm font-medium">Liên hệ nhanh</h4>
+            <div className="flex flex-wrap gap-2">
+              <a
+                href={`tel:${inquiry.phone ?? inquiry.userPhone}`}
+                className="inline-flex items-center gap-1.5 rounded-md border px-3 py-1.5 text-sm transition-colors hover:bg-accent"
+              >
+                📞 Gọi điện
+              </a>
+              <a
+                href={`https://zalo.me/${(inquiry.phone ?? inquiry.userPhone).replace(/^0/, '84')}`}
+                target="_blank"
+                rel="noopener noreferrer"
+                className="inline-flex items-center gap-1.5 rounded-md border px-3 py-1.5 text-sm transition-colors hover:bg-accent"
+              >
+                💬 Zalo
+              </a>
+            </div>
+          </div>
+        </div>
+
+        <DialogFooter>
+          <Button variant="outline" onClick={() => onOpenChange(false)}>
+            Đóng
+          </Button>
+          {!inquiry.isRead && (
+            <Button onClick={handleMarkRead} disabled={markAsRead.isPending}>
+              {markAsRead.isPending ? 'Đang xử lý...' : 'Đánh dấu đã đọc'}
+            </Button>
+          )}
+        </DialogFooter>
+      </DialogContent>
+    </Dialog>
+  );
+}