Add Fortify auth, Flux dark mode, demo seed, and Docker hot reload.

Protect recordings per user, seed a demo login on container start, and bind-mount the app with Vite HMR for local Compose development.

app/Http/Controllers/TranscriptionStatusController.php

@@ -4,6 +4,7 @@ namespace App\Http\Controllers;
 
 use App\Models\Recording;
 use Illuminate\Http\JsonResponse;
+use Illuminate\Support\Facades\Gate;
 
 class TranscriptionStatusController extends Controller
 {
@@ -12,6 +13,8 @@ class TranscriptionStatusController extends Controller
      */
     public function __invoke(Recording $recording): JsonResponse
     {
+        Gate::authorize('view', $recording);
+
         $recording = $recording->fresh();
 
         if ($recording->recoverOrphanedTranscription()) {