feat(phase-1): TapTrack Hub initial scaffold

Full project scaffold for TapTrack Hub — cloud SaaS control plane
for managing on-prem TapTrack school deployments.

## Infrastructure
- Docker Compose: backend (gunicorn+uvicorn), Celery worker + beat,
  frontend (Vite build + nginx), PostgreSQL 15, Redis 7, nginx proxy
- Dockerfile for backend and frontend, nginx reverse proxy config

## Backend (FastAPI + SQLAlchemy async + Celery)
Database schema (10 tables):
  hub_users, schools, licenses, sms_jobs, sms_credit_ledger,
  invoices, invoice_line_items, school_subscriptions,
  support_tickets, ticket_replies, audit_logs, announcements

Auth: JWT (python-jose) + bcrypt + role-based FastAPI dependencies
  (get_current_user, require_super_admin, require_school_admin)

Routers (11): auth, schools, licenses, sms, billing, tickets,
  users, dashboard, school_portal, announcements, sync

Celery tasks (6):
  sms.process_queue, billing.generate_monthly_invoices,
  billing.send_invoice_email, billing.check_overdue,
  license.check_expiry, reports.send_monthly_reports

Services: SMTP email helper (smtplib + Jinja2)
Seed script: creates super admin admin@taptrack.io

## Frontend (Vue 3 + Vite + Pinia + Tailwind CSS)
Router: 14 routes across super admin + school portal layouts
Stores: Pinia auth store with localStorage persistence
API client: full axios client for all backend endpoints
Layouts: AppLayout (super admin), PortalLayout (school), AuthLayout
Components: AppSidebar, PortalSidebar, SidebarItem, KpiCard,
  StatusBadge, ToastStack
Pages: Login, Dashboard, Schools, SchoolDetail, Licenses, SMS,
  Billing, Tickets, TicketDetail, Users, Announcements, 404
Portal pages: Overview, Billing, SMS Reports, Tickets, Profile

## PAUL Planning Files
- .paul/ROADMAP.md: full 15-phase roadmap with detailed scope
- .paul/STATE.md: current position, tech stack, architecture notes
- .paul/phases/01-setup/01-PLAN.md: complete Phase 1 plan (done)
- .paul/phases/02 through 15: README stubs for all future phases

backend/app/worker.py

@@ -0,0 +1,55 @@
+"""Celery worker + beat schedule for TapTrack Hub."""
+import os
+from celery import Celery
+from celery.schedules import crontab
+
+REDIS_URL = os.getenv("REDIS_URL", "redis://redis:6379/0")
+
+celery_app = Celery(
+    "taptrack_hub",
+    broker=REDIS_URL,
+    backend=REDIS_URL,
+    include=[
+        "app.tasks.sms",
+        "app.tasks.billing",
+        "app.tasks.reports",
+        "app.tasks.license",
+    ],
+)
+
+celery_app.conf.update(
+    task_serializer="json",
+    accept_content=["json"],
+    result_serializer="json",
+    timezone="Asia/Manila",
+    enable_utc=True,
+    beat_schedule={
+        # Process pending SMS jobs every 30 seconds
+        "process-sms-queue": {
+            "task": "sms.process_queue",
+            "schedule": 30.0,
+        },
+        # Check license expiry every day at 8am
+        "check-license-expiry": {
+            "task": "license.check_expiry",
+            "schedule": crontab(hour=8, minute=0),
+        },
+        # Generate monthly invoices on the 1st at 6am
+        "generate-monthly-invoices": {
+            "task": "billing.generate_monthly_invoices",
+            "schedule": crontab(day_of_month=1, hour=6, minute=0),
+        },
+        # Send monthly reports on the 1st at 7am
+        "send-monthly-reports": {
+            "task": "reports.send_monthly_reports",
+            "schedule": crontab(day_of_month=1, hour=7, minute=0),
+        },
+        # Check for overdue invoices daily at 9am
+        "check-overdue-invoices": {
+            "task": "billing.check_overdue",
+            "schedule": crontab(hour=9, minute=0),
+        },
+    },
+)
+
+app = celery_app