STAGE 60 — PWA API AUTHENTICATION FOUNDATION

Adds a browser-side PWA authentication helper for the existing API v1 login, refresh and logout endpoints.
Access and refresh tokens are memory-only and are never persisted in browser storage or service-worker caches.

No database changes.
No SQL import.

Test:
https://ieduportal.com/school-management-system/upgrade/stage60.php
