Add server routes for companies, approvals, costs, and dashboard

New routes: companies, approvals, costs, dashboard, authz. New
services: companies, approvals, costs, dashboard, heartbeat,
activity-log. Add auth middleware and structured error handling.
Expand existing agent and issue routes with richer CRUD operations.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

server/src/services/projects.ts

@@ -4,7 +4,7 @@ import { projects } from "@paperclip/db";
 
 export function projectService(db: Db) {
   return {
-    list: () => db.select().from(projects),
+    list: (companyId: string) => db.select().from(projects).where(eq(projects.companyId, companyId)),
 
     getById: (id: string) =>
       db
@@ -13,10 +13,10 @@ export function projectService(db: Db) {
         .where(eq(projects.id, id))
         .then((rows) => rows[0] ?? null),
 
-    create: (data: typeof projects.$inferInsert) =>
+    create: (companyId: string, data: Omit<typeof projects.$inferInsert, "companyId">) =>
       db
         .insert(projects)
-        .values(data)
+        .values({ ...data, companyId })
         .returning()
         .then((rows) => rows[0]),