Add Fortify auth, Flux dark mode, demo seed, and Docker hot reload.

Protect recordings per user, seed a demo login on container start, and bind-mount the app with Vite HMR for local Compose development.

app/Http/Requests/StoreRecordingRequest.php

@@ -37,7 +37,7 @@ class StoreRecordingRequest extends FormRequest
 
     public function authorize(): bool
     {
-        return true;
+        return $this->user() !== null;
     }
 
     /**

app/Http/Requests/TranscribeRecordingRequest.php

@@ -8,7 +8,9 @@ class TranscribeRecordingRequest extends FormRequest
 {
     public function authorize(): bool
     {
-        return true;
+        $recording = $this->route('recording');
+
+        return $recording !== null && $this->user()?->can('transcribe', $recording) === true;
     }
 
     /**