feat: implement TASK-WP1-02 login sessions

apps/web/src/main.tsx

@@ -1,8 +1,8 @@
 import { StrictMode } from "react";
 import { createRoot } from "react-dom/client";
 
-import { ToolchainProbe } from "./toolchain-probe.js";
 import { registerPublicAssetServiceWorker } from "./public-asset-cache.js";
+import { UserAuthPage } from "./user-auth.js";
 
 const root = document.getElementById("root");
 
@@ -13,8 +13,18 @@ if (!root) {
 // Cache failure leaves public assets network-backed and must not create alternate persistence.
 void registerPublicAssetServiceWorker().catch(() => undefined);
 
-createRoot(root).render(
-  <StrictMode>
-    <ToolchainProbe />
-  </StrictMode>,
-);
+const appRoot = createRoot(root);
+let authRevision = 0;
+
+function renderAuthenticationEntry() {
+  authRevision += 1;
+  appRoot.render(
+    <StrictMode>
+      <UserAuthPage key={authRevision} />
+    </StrictMode>,
+  );
+}
+
+// Any authenticated surface can dispatch this after a revoked/invalid session response.
+window.addEventListener("dada:session-invalid", renderAuthenticationEntry);
+renderAuthenticationEntry();