- Server: new DB migration (7_local_auth.sql) adds local_username/local_password_hash columns
- Server: add findLocalUser / createLocalUser to store, bcryptjs for password verification
- Server: /api/auth advertises local: {} when config.auth.local.username+password are set
- Server: POST /api/users handles local credential login, verifying username+password against config
- Client: new Auth/Local.elm module with Method type and authPayload encoder
- Client: Auth/Methods.elm gains local field, Login.elm renders username/password form
- Config: auth.local now takes username + password (bcrypt hash) for single-account local login
Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>