Add authentication and per-user indexes

[pun33th45]

Goal

Add authentication so multiple users can safely upload and query separate project indexes.

Tasks

• Add user model and auth strategy
• Store vector indexes per user or workspace
• Protect upload and query endpoints
• Add tests for unauthorized requests

Acceptance Criteria

• Users cannot access another user's indexed context
• Upload and query endpoints require authentication
• Tests cover access control behavior