Fix Wave 2 review: PG18 volume path, null guards, NotAuthorized redirect, drop docker-compose, port 5433 connection strings

DeepDrftWeb.Client/Program.cs

@@ -15,6 +15,7 @@ Startup.ConfigureContentServices(builder.Services, contentApiUrl);
 Startup.ConfigureDomainServices(builder.Services);
 
 // AuthBlocks WASM: auth state deserialization bridge (prerender → WASM handoff).
+// Registers AddAuthorizationCore, AddCascadingAuthenticationState, AddAuthenticationStateDeserialization.
 AuthBlocksWeb.Client.Startup.ConfigureServices(builder.Services);
 
 var app = builder.Build();

DeepDrftWeb.Client/Routes.razor

@@ -1,5 +1,13 @@
-<Router AppAssembly="typeof(_Imports).Assembly">
+@inject NavigationManager NavigationManager
+
+<Router AppAssembly="typeof(_Imports).Assembly">
     <Found Context="routeData">
-        <AuthorizeRouteView RouteData="routeData" DefaultLayout="typeof(Layout.MainLayout)" />
+        <AuthorizeRouteView RouteData="routeData" DefaultLayout="typeof(Layout.MainLayout)">
+            <NotAuthorized>
+                @{
+                    NavigationManager.NavigateTo($"account/login?returnUrl={Uri.EscapeDataString(NavigationManager.Uri)}", forceLoad: true);
+                }
+            </NotAuthorized>
+        </AuthorizeRouteView>
     </Found>
 </Router>