fix(security): JWT require env, remove *** token, WS auth disabled

fix(automation): implement all 6 actions + real cron parser
fix(db): pq.Array for TEXT[], add sqlmock tests
fix(schema): single source migrations
docs: v2 architecture + frontend refactor proposals

backend/main.go

@@ -34,14 +34,14 @@ func main() {
 		port = "9092"
 	}
 
-	// Database connection with migrations
+	// Database connection
 	database, err := db.Connect(cfg.DBURL)
 	if err != nil {
 		logger.Fatal().Err(err).Msg("database connect failed")
 	}
 	defer database.Close()
 
-	// Run migrations
+	// Run migrations from single source of truth
 	migrationsDir := os.Getenv("MIGRATIONS_DIR")
 	if migrationsDir == "" {
 		migrationsDir = "./db/migrations"
@@ -49,6 +49,7 @@ func main() {
 	if err := db.RunMigrations(database, migrationsDir); err != nil {
 		logger.Fatal().Err(err).Msg("migrations failed")
 	}
+	logger.Info().Str("dir", migrationsDir).Msg("migrations completed")
 
 	// Redis cache
 	redisClient, err := cache.NewRedisClient(cfg.RedisURL)