feat(server): implement full REST API with JWT auth and real-time WebSocket

- Add HTTP handlers for issues, comments, agents, workspaces, inbox, members, and activity
- Implement JWT authentication middleware with Bearer token validation
- Add sqlc queries for all entities (CRUD operations)
- Extract router into reusable NewRouter() for testability
- Expand SDK with full API client methods (CRUD for all resources)
- Add updateWorkspace to SDK, add Member type to shared types

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

server/pkg/db/queries/comment.sql

@@ -0,0 +1,23 @@
+-- name: ListComments :many
+SELECT * FROM comment
+WHERE issue_id = $1
+ORDER BY created_at ASC;
+
+-- name: GetComment :one
+SELECT * FROM comment
+WHERE id = $1;
+
+-- name: CreateComment :one
+INSERT INTO comment (issue_id, author_type, author_id, content, type)
+VALUES ($1, $2, $3, $4, $5)
+RETURNING *;
+
+-- name: UpdateComment :one
+UPDATE comment SET
+    content = $2,
+    updated_at = now()
+WHERE id = $1
+RETURNING *;
+
+-- name: DeleteComment :exec
+DELETE FROM comment WHERE id = $1;