master
feat(auth): T-013 route protection + real child name in header + login redirect
fix: set localStorage consent flag after registration to prevent double-consent screen