feat: implement report submission with photo upload and map display

- Fix Prisma client generation and database schema sync issues
- Implement user auto-creation from Clerk authentication
- Add raw SQL queries to handle MySQL POINT spatial fields
- Make password_hash optional for Clerk-only authentication
- Update MapPage to fetch real reports from API
- Add photo display in map popups with full-size modal view
- Configure CORS and Helmet for cross-origin image loading
- Add cleanup tracking task to implementation plan

Fixes report submission 500 errors and enables end-to-end workflow from submission to map display.

server/prisma/schema.prisma

@@ -10,7 +10,7 @@ datasource db {
 model User {
   id                 String              @id @default(dbgenerated("(uuid())")) @db.VarChar(36)
   email              String              @unique(map: "email") @db.VarChar(255)
-  password_hash      String              @db.VarChar(255)
+  password_hash      String?             @db.VarChar(255)
   username           String              @unique(map: "username") @db.VarChar(100)
   createdAt          DateTime?           @default(now()) @map("created_at") @db.Timestamp(0)
   updatedAt          DateTime?           @default(now()) @updatedAt @map("updated_at") @db.Timestamp(0)