Fix PocketBase auth and note submission

- Replace popup OAuth with SDK authWithOAuth2 realtime channel (urlCallback)
  so login works in Edge app mode without navigating the main window
- Remove manual redirect/sessionStorage OAuth flow that broke in Edge app mode
- Serve PocketBase config (URL, collection, provider) from server endpoint
  backed by env vars instead of hardcoded localhost
- Fix /api/submit: target Notes collection with correct field mapping
  (body_plain, body_html, title, type, email, Username, userId, job_note,
  Job_Number) instead of Job_Info_Prod with wrong field names
- Remove localhost fallbacks from auth-module backend and frontend

auth-module/backend.ts

@@ -100,7 +100,7 @@ export class PocketBaseValidator {
   private pb: PocketBase;
 
   constructor(pbUrl?: string) {
-    this.pb = new PocketBase(pbUrl || process.env.PB_DB || 'http://127.0.0.1:8090');
+    this.pb = new PocketBase(pbUrl || process.env.PB_URL || process.env.PB_DB || '');
   }
 
   /**

auth-module/frontend.ts

@@ -13,7 +13,7 @@ export class PocketBaseAuth {
 
   constructor(config: AuthConfig, callbacks?: Partial<AuthCallbacks>) {
     this.config = {
-      pbUrl: config.pbUrl || 'http://localhost:8090',
+      pbUrl: config.pbUrl || '',
       collection: config.collection || 'Users',
       provider: config.provider || 'microsoft',
       loginContainerId: config.loginContainerId || 'loginContainer',