feat: move the packaged app auth foundation fully onto SurrealDB

[ibourgeois]

Summary

The packaged macOS app is still using the NativePHP SQLite database for core Laravel auth/session/cache data, while SurrealDB currently only holds the early workspace proof data.

Current State

• packaged app auth/account data lives in SQLite
• packaged app session/cache foundations still rely on SQLite-backed Laravel defaults
• the embedded/local Surreal database currently contains only workspace-layer proof data

Why This Matters

If Katra is going to be genuinely Surreal-first, the packaged app should stop splitting its local state across two persistence models. Surrealist also cannot currently give us a full picture of the app because identity/session state is not there.

Acceptance Criteria

• packaged desktop app users are stored in SurrealDB
• packaged desktop app sessions/cache/rate-limiter foundations no longer depend on SQLite
• NativePHP runtime config no longer creates confusion about where app state lives
• packaged app local data can be inspected coherently through SurrealDB tooling
• docs explain the final persistence model clearly