fix: audit round 2 — session cookie Secure kondisional, logout clear cookie, IDOR report owner-scoping (migrasi 0008), health force login-gate, SSE stream login-gate, FE: Gate undefined-flicker, auth-expired global redirect, X-User-Key demo dihapus, error handling alerts/routines/watchlist, chart label, encodeURIComponent, Screener onMount

backend/internal/store/auth.go

@@ -23,6 +23,7 @@ const (
 	ErrBadPassword authErr = "password minimal 8 karakter"
 	ErrTaken       authErr = "username sudah dipakai"
 )
+
 type User struct {
 	ID        int64
 	GoogleSub string