Deploy IT Tools to Cloudflare Pages with Access and persistent favorites

[shake]

Cloudflare deployment and auth/favorites update for IT Tools.

Scope:

• Deploy the SPA to Cloudflare Pages
• Protect the app with Cloudflare Access
• Persist favorites in D1 so they survive browser/device changes

Implemented items:

• Pages deploy with SPA fallback
• D1-backed favorites API and migration
• Access apps for both the default Pages domain and the custom domain
• One-time PIN login with allow policy for the owner email

Verification:

• Build and lint/tests passed locally
• Pages deployment uploaded successfully
• D1 migration applied remotely