fix(ux): auth workflow fixes — customer login, dashboard, auth service, YARP ports

Phase 1 fixes:
- Fixed Customer Login route (/auth/login/customer now renders correctly)
- Fixed YARP proxy ports for all microservices
- Fixed login links across all auth pages (/login → /auth/login)
- Created AuthStateService for role-based portal redirects
- Dashboard loads real shop data from BFF API
- Reverted UseBlazorFrameworkFiles (breaks .NET 10 MapStaticAssets)
- Created Home.razor landing page and LoginSelect.razor (compiled in DLL,
  Blazor client routing needs investigation for / and /auth/login routes)

Verified working:
- Customer Login: phone/OTP with social login
- Staff Login: green theme with role hints
- Admin Login: blue theme with security warning
- Branch Login: orange theme with stats
- Registration: form + API via YARP proxy
- Store Onboarding: 5 types (Café/Nhà hàng/Karaoke/Spa/Bán lẻ)

Co-authored-by: Velik <hongochai10@users.noreply.github.com>

apps/web-client-tpos-net/src/WebClientTpos.Client/Layout/MainLayout.razor

@@ -1,4 +1,4 @@
-@inherits LayoutComponentBase
+@inherits LayoutComponentBase
 @inject IStringLocalizer<MainLayout> L
 
 <MudThemeProvider IsDarkMode="true" Theme="_theme" />
@@ -21,8 +21,8 @@
             <!-- Language Switcher -->
             <LanguageSwitcher />
 
-            <a href="/login" class="tpos-nav-link">@L["Nav_Login"]</a>
-            <a href="#" class="btn-accent">@L["Nav_FreeTrial"]</a>
+            <a href="/auth/login" class="tpos-nav-link">@L["Nav_Login"]</a>
+            <a href="/register" class="btn-accent">@L["Nav_FreeTrial"]</a>
         </div>
 
         <!-- Mobile hamburger button -->
@@ -44,10 +44,10 @@
         <a href="#features" class="tpos-mobile-link" @onclick="CloseMobileMenu">@L["Nav_Features"]</a>
         <a href="#pricing" class="tpos-mobile-link" @onclick="CloseMobileMenu">@L["Nav_Pricing"]</a>
         <a href="#" class="tpos-mobile-link" @onclick="CloseMobileMenu">@L["Nav_Contact"]</a>
-        <a href="/login" class="tpos-mobile-link" @onclick="CloseMobileMenu">@L["Nav_Login"]</a>
+        <a href="/auth/login" class="tpos-mobile-link" @onclick="CloseMobileMenu">@L["Nav_Login"]</a>
         <div class="tpos-mobile-actions">
             <LanguageSwitcher />
-            <a href="#" class="btn-accent btn-accent-lg" style="width:100%; text-align:center;">@L["Nav_FreeTrial"]</a>
+            <a href="/register" class="btn-accent btn-accent-lg" style="width:100%; text-align:center;">@L["Nav_FreeTrial"]</a>
         </div>
     </div>
 }

apps/web-client-tpos-net/src/WebClientTpos.Client/Pages/Auth/Register.razor

@@ -92,7 +92,7 @@
         
         <div class="auth-footer">
             <span>@L["Auth_Register_HaveAccount"]</span>
-            <a href="/login" class="link-primary">@L["Auth_Register_LoginLink"]</a>
+            <a href="/auth/login" class="link-primary">@L["Auth_Register_LoginLink"]</a>
         </div>
     </section>
 </div>
@@ -127,7 +127,7 @@
                     // EN: Redirect to login after 2 seconds
                     // VI: Chuyển hướng đến đăng nhập sau 2 giây
                     await Task.Delay(2000);
-                    Navigation.NavigateTo("/login");
+                    Navigation.NavigateTo("/auth/login");
                 }
                 else
                 {

apps/web-client-tpos-net/src/WebClientTpos.Server/Program.cs

@@ -56,12 +56,11 @@ if (app.Environment.IsDevelopment())
 {
     app.MapOpenApi();
     app.UseDeveloperExceptionPage();
+    app.UseWebAssemblyDebugging();
 }
 
 app.UseHttpsRedirection();
 
-// EN: Enable CORS
-// VI: Kích hoạt CORS
 // EN: Enable CORS
 // VI: Kích hoạt CORS
 app.UseCors("BlazorClient");

services/iam-service-net/src/IamService.API/keys/is-signing-key-40845B4B36348C1B2FD55311A93F4280.json

@@ -0,0 +1 @@
+{"Version":1,"Id":"40845B4B36348C1B2FD55311A93F4280","Created":"2026-02-26T17:40:10.6713835Z","Algorithm":"RS256","IsX509Certificate":false,"Data":"CfDJ8OE6IQaarJdMrFb-ELKfkmJdiuzUgIT8mztIqfJcZrKHdQw5UiPZvLOdgRvR4ffdcIvMXsaKsH-l0TKza8hmQVhE5RZX2CpQtd_EceQqb4xc7CMzvtCAr6f4HVbbIYtfGOfzzvLPQ2kLhHzoKRVnhFVWKkHswkDekog_H_a6MxDt9WbddI3xuM8c97YA8lsN4hojKfHhKSTE_05eHmXAir6NtMZEgNziU6h99r9EInp7acESdlQ4aUqKapVpDzYb1MTNxxFwggbU_gNlDNwhOZi2-ElWXNJ4pNBwF1ZUjRgydNwdu-qUsYejMkhDPpkX9nXRmU0Hofea-XPDGvcMu5u6YNXB7bRHaY6G1NB1-UGkGbFhM_CQMAuUM8Sp17Zxkgu5YYC9xcWaefdi82xaGl5SGEAV0nfFGZctvqG9YAYR7U2o2hXBOgN2pQuvSdfe4d4IP1KjGa726eVzEMwfzqy-wWpO_UKINHEKEeVHYfhjWvA3zofuCis154kVThw3KFVBOuLCcguF6AqiwXV_veLU-sMaq3sgLwHduxoaNeVZbGAWsqseJC3G1KPjibrQ6Dd1du0uzLMaOUctjPzsDwU4nFpXBUs-pGZuG03vltOJh0U_ankoGW4q5XjsyFQGDFKivdcrufst2DFx_pvD1PtkAawdAoLG9pZy5lrhCxwv_uzDw3pdIK4Q4C-eOpkC-nOsZE3PWfjdA0ouZ09USbj_qeA6mpF0TIafuJTRlz-KkSiy5X4qLWiznGQWO8JmvZGNLx2P8eX_IijhzZaZXknTDRLsmFi5bq1NaEPGvJRPnS_n2E5N2YMC_RBq6ct0pppTnsJaYOip-DPLcA2WUtw_j8QaLD9Y80a0Gv1ky_hU-iivKhUFsvWxvsuJqRFcbFBw5CO-wydUxvDR4ejznen1nAKxh3Jh9b1l26LfMllns9FBcMrTzYYHMkaZFSMXsY-KhaBkcw-46O8aunZlzioxP5oTsaAyI_Ru3jlCJLteCtXoP8c8gpnOsem1praCx6i8n418hmrw1HpK3gdNifrE4fW_M2h5UxzZLzzRZkhvsv_ZgKorpvYH5QrIGzOWUR2DF_wCCTcZbU6PFy0ztTgw_O8NGHi3kAveu_Dff566oWj0oAfNQ0g0lPXnwkK7ZxITHwL47iVhDvEt5OvSR6zTnX4J2J2P3MajQYPkojT3zk5yezEYVp0_hHjQ155f44Q-MoTVaDxJhvF3nN0JXCZ4Xr2wcGiFwGa8OPF0t1H66dapUNwYMfQdPQx8_KiOvSHQUrLtPh-fknasU-dD54TAZotts4zHKRw05W6_7kNaM7mMSCjUd8y1ub2Ae5t0qt1Vt123df-SyBI1vVKFtMPkCpYtTYzgtoR_HEMLUF3bqfoJqXoHvJDBM86DitJYYz-Zcdiukx5rMHSfz6XNQx1m9T8twbXwrowd5K7G3kaDZkXHKtv-Shbsb99gkyq2uHSPDELafyOJfrFQLcoapDuaXCHss8nIhFFZs_YTqs_eGzyUW_tu2fnech-3IO7dlaHmShXJhkE76oEW7eeJCT9WwSbsiSosdU38bCRZeJ05ATIgIdcRGhXF8zeOwEDK-TZvltb0x5JgzQr4BXlPAfi7cQuyyNVLIXz9tyoC0WuFnSS1C1-oJb0ZiW46HpafPzU7eh3is7zwBqv7UkiIZtPUHapJEvxSNNeGM95Mu7h5B1GeoYgurtYfNo4HBkmxsRqsbnEkGuLkfaK33k3ywZZcJx7-BqR_dtzOtdiX0vXcvQr-MnkpleCOKxUr2q0NMjRqOYHAGEdXhWHAqcDhIR5hpx6nFMnCFo2GJu-BpHAJSPQU9OuEWhOgnQmJXM_0NyuaXWQ5xSNGZExKr814ILSTopc56AYHU-AmZQ_Pt2paDcBDj7c3If9N2yo8H_8lxXO1hPBxS7IbJMfMGFDdJrvuHczF1xVzo1x6sYQbRNkezBpIglJXr0GSqwyJ1Ca6BYuCG3_G-jS-MTMkNYiIihZt7OhKtriwZ5YG582R9yyWRfw6YTv_7W-IL1lxdSGFNajXnrtGl513TvQmadqQA1lwjSUtCQYE9b-zXYaFwyn1JdOuJ4fMY2rGdlhODVPot2VGxqVVcjY4c_SN3WHzcxSCcRL-L49oN65OboVMFQ7slH4Gyx4J6gZBMsUFWl_iG5Y55OcfnOgEwbXzjl8yYy69z9NbzrElZ-1h5DlT2QETqWJb1Ujxhwpge-W5RIMxVptNRcBCKVpEhs4VqpKTtUX0v-7srkviEECgfpRAQrCqRZr7CDE6JS7bvOvYdrS0v39z86WhWsxrE7fkxMaoH0mzudU3g9yaD0f5HLjvHmA8VSRugAWi0OQqK7bVysc_q0wFBj6-MQLPD-CBW98X1FMsgVpBNIGeij5He9-iRt3Q9JZbMZakIB2BfnSrkvS9gJ68gfxX_rVhLJs8eF78Ftg1jXdNPZFXOQNqloVym4Oj","DataProtected":true}