feat: add MFA/TOTP auth, PII encryption, agents/leads/inquiries modules, and comprehensive tests

- Add TOTP-based MFA with setup, verify, disable, backup codes, and challenge flow
- Add PII field encryption middleware with AES-256-GCM and deterministic search hashes
- Add agents, inquiries, and leads domain modules with entities, events, value objects
- Add web dashboard pages for inquiries and leads with detail dialogs
- Add 30+ component tests (valuation, charts, listings, search, providers, UI)
- Add Prisma migrations for encryption hash columns and MFA TOTP support
- Fix all ESLint errors (unused imports, duplicate imports, lint auto-fixes)
- Update dependencies and lock file
- Clean up obsolete exploration/QA docs, add audit documentation

Co-Authored-By: Paperclip <noreply@paperclip.ing>

apps/web/components/leads/lead-status-badge.tsx

@@ -0,0 +1,11 @@
+import { Badge } from '@/components/ui/badge';
+import { LEAD_STATUSES, type LeadStatus } from '@/lib/leads-api';
+
+interface LeadStatusBadgeProps {
+  status: LeadStatus;
+}
+
+export function LeadStatusBadge({ status }: LeadStatusBadgeProps) {
+  const config = LEAD_STATUSES[status] ?? { label: status, variant: 'outline' as const };
+  return <Badge variant={config.variant}>{config.label}</Badge>;
+}