feat: timeline UI overhaul with project/resource panel redesign, quick filters, and API improvements

Redesigned timeline project and resource panels with expanded detail views,
added quick filter toolbar, improved drag handling, and enhanced vacation/entitlement
router logic. Includes e2e test updates and minor API fixes.

Co-Authored-By: claude-flow <ruv@ruv.net>

packages/api/src/trpc.ts

@@ -54,17 +54,22 @@ export const createCallerFactory = t.createCallerFactory;
 export const publicProcedure = t.procedure;
 
 /**
- * Protected procedure — requires any authenticated session.
+ * Protected procedure — requires authenticated session AND a valid DB user record.
+ * This prevents stale sessions from accessing data after the DB user is deleted.
  */
 export const protectedProcedure = t.procedure.use(({ ctx, next }) => {
   if (!ctx.session?.user) {
     throw new TRPCError({ code: "UNAUTHORIZED", message: "Authentication required" });
   }
+  if (!ctx.dbUser) {
+    throw new TRPCError({ code: "UNAUTHORIZED", message: "User account not found" });
+  }
   return next({
     ctx: {
       ...ctx,
       session: ctx.session,
       user: ctx.session.user,
+      dbUser: ctx.dbUser,
     },
   });
 });