fix(auth): use actual hostname instead of localhost in frontend API client

- Modified frontend/lib/api.ts to use window.location.hostname as fallback
- Ensures browser on external IP reaches correct backend HTTPS port
- Allows admin/admin login to work from any access point
- Auth is fully functional and working

.claude/settings.local.json

@@ -111,7 +111,41 @@
       "Skill(gsd-discuss-phase)",
       "Skill(gsd-code-review)",
       "Skill(gsd-progress)",
-      "Skill(gsd-code-review-fix)"
+      "Skill(gsd-code-review-fix)",
+      "Bash(./start_server.sh)",
+      "Bash(killall node *)",
+      "Bash(grep -v grep echo \"---\" echo \"Checking ports...\" netstat -tuln)",
+      "Bash(killall python3 *)",
+      "Bash(chmod +x /data/programare_AI/tfm_ainventory/start_servers.py)",
+      "Bash(tee /tmp/startup.log)",
+      "Bash(awk 'NR>1 {print $2}')",
+      "Bash(xargs -r kill -9)",
+      "Bash(kill -9 712109)",
+      "Bash(curl -s http://localhost:8916/health)",
+      "Bash(/data/programare_AI/tfm_ainventory/.venv/bin/pip list *)",
+      "Bash(/data/programare_AI/tfm_ainventory/.venv/bin/pip install *)",
+      "Bash(/data/programare_AI/tfm_ainventory/.venv/bin/python3 -c \"import openpyxl; print\\('✓ openpyxl available'\\)\")",
+      "Bash(pkill -f \"next-server\\\\|uvicorn\\\\|node.*\\\\.next\")",
+      "Bash(tee /tmp/startup_final.log)",
+      "Bash(curl -s http://localhost:8916/docs)",
+      "Bash(pkill -f \"next-server\\\\|uvicorn\")",
+      "Bash(pkill -9 caddy uvicorn node)",
+      "Bash(pkill -9 -f \"next-server|uvicorn|caddy\")",
+      "Bash(curl -sk https://192.168.84.131:8919)",
+      "mcp__plugin_playwright_playwright__browser_navigate",
+      "Bash(curl -s http://localhost:8916/openapi.json)",
+      "Bash(curl -s http://localhost:8917/)",
+      "Bash(.venv/bin/python3 *)",
+      "Bash(awk '{print $2}')",
+      "Bash(xargs -I {} lsof -p {})",
+      "Bash(env)",
+      "Read(//data/**)",
+      "Bash(netstat -tlnp)",
+      "Bash(curl -s http://localhost:8917/network.json)",
+      "Bash(pkill -f \"next.*8917\")",
+      "Bash(curl -s -X POST http://192.168.84.131:8918/users/login -H 'Content-Type: application/json' -d '{\"username\":\"admin\",\"password\":\"admin\"}')",
+      "Bash(curl -k -s -X POST https://192.168.84.131:8918/users/login -H 'Content-Type: application/json' -d '{\"username\":\"admin\",\"password\":\"admin\"}')",
+      "Bash(/data/programare_AI/tfm_ainventory/.venv/bin/python3 *)"
     ]
   }
 }