feat: remove OTP gate from transactions, fix categories auth, add implementation plan

- Remove OtpGateGuard from transactions controller (OTP verified at login)
- Fix categories controller to use authenticated user instead of TEMP_USER_ID
- Add comprehensive implementation plan document
- Update .env.example with WEB_APP_URL
- Prepare for admin dashboard development

apps/api/dist/users/users.service.d.ts

@@ -4,13 +4,42 @@ export declare class UsersService {
     constructor(prisma: PrismaService);
     me(): Promise<{
         id: string;
-        email: string | null;
+        email: string;
+        phone: string | null;
         createdAt: Date;
         updatedAt: Date;
         status: string;
+        emailVerified: boolean;
+        passwordHash: string | null;
         name: string | null;
         avatarUrl: string | null;
         defaultCurrency: string | null;
         timeZone: string | null;
+        otpEmailEnabled: boolean;
+        otpWhatsappEnabled: boolean;
+        otpTotpEnabled: boolean;
+        otpTotpSecret: string | null;
     } | null>;
+    updateProfile(userId: string, data: {
+        name?: string;
+        phone?: string;
+    }): Promise<{
+        success: boolean;
+        message: string;
+        user: {
+            id: string;
+            email: string;
+            phone: string | null;
+            name: string | null;
+            avatarUrl: string | null;
+        };
+    }>;
+    getAuthInfo(userId: string): Promise<{
+        hasGoogleAuth: boolean;
+        hasPassword: boolean;
+    }>;
+    deleteAccount(userId: string, password: string): Promise<{
+        success: boolean;
+        message: string;
+    }>;
 }