Fix auth middleware bypass and missing async awaits

[Copilot]

Repository scan identified a critical auth middleware bug and several code quality issues.

Security Fixes

• Auth middleware missing return — Unauthenticated routes (/, /docs, /auth/*, /nic/update) continued executing auth checks after next(), potentially returning 401 on public endpoints:

// Before: falls through to auth header check
if (c.req.path.startsWith("/docs")) {
    await next();
}
const authHeader = c.req.header("Authorization"); // still runs

// After: properly exits
if (c.req.path.startsWith("/docs")) {
    await next();
    return;
}

• Missing await on session invalidation — SessionHandler.inValidateAllSessionsForUser() calls in password change and account deletion were not awaited, risking race conditions

Code Quality

• Remove unused de import from zod/v4/locales
• Replace console.log with Logger for consistent logging
• Remove debug console.log(record) in records endpoint
• Fix syntax error client..$get → client.$get in test file

Original prompt

scan the whole repository for any bad code, bad security or bugs and resolve thoes issues. create a pull request with your chnages when you are done

---

✨ Let Copilot coding agent set things up for you — coding agent works faster and does higher quality work when set up for your repo.