feat(auth): add user profile, phone login, and account deletion

backend/internal/models/models.go

@@ -5,6 +5,7 @@ import "time"
 type User struct {
 	ID           string         `json:"id"`
 	Email        string         `json:"email"`
+	Phone        string         `json:"phone,omitempty"`
 	PasswordHash string         `json:"-"`
 	Name         string         `json:"name"`
 	AvatarURL    string         `json:"avatar_url,omitempty"`
@@ -26,6 +27,23 @@ func (u *User) Public() PublicUser {
 	return PublicUser{ID: u.ID, Email: u.Email, Name: u.Name, AvatarURL: u.AvatarURL}
 }
 
+// SelfUser is the owner-facing representation of an account. Unlike PublicUser
+// it carries the phone number, which must never appear in public views.
+type SelfUser struct {
+	ID        string `json:"id"`
+	Email     string `json:"email,omitempty"`
+	Phone     string `json:"phone,omitempty"`
+	Name      string `json:"name"`
+	AvatarURL string `json:"avatar_url,omitempty"`
+}
+
+func (u *User) Self() SelfUser {
+	if u == nil {
+		return SelfUser{}
+	}
+	return SelfUser{ID: u.ID, Email: u.Email, Phone: u.Phone, Name: u.Name, AvatarURL: u.AvatarURL}
+}
+
 type Album struct {
 	ID            string    `json:"id"`
 	OwnerID       string    `json:"owner_id"`