feat(FN-005): implement frontend foundation with auth and routing

- Add OIDC authentication with PKCE flow
- Create dashboard shell with sidebar and header
- Implement project management UI (list, create, detail)
- Add tool spawn page with tool/project selection
- Create tool instance detail page with status and controls
- Set up React Router with route guards
- Add Zustand auth store and API client with types

apps/web/src/pages/LoginPage.tsx

@@ -0,0 +1,37 @@
+import { useEffect } from 'react'
+import { createPKCE, storePKCE } from '../auth/oidc'
+
+const OIDC_ISSUER = import.meta.env.VITE_OIDC_ISSUER
+const CLIENT_ID = import.meta.env.VITE_OIDC_CLIENT_ID
+const REDIRECT_URI = import.meta.env.VITE_OIDC_REDIRECT_URI
+
+export default function LoginPage() {
+  useEffect(() => {
+    const initiateLogin = async () => {
+      const { verifier, challenge } = await createPKCE()
+      storePKCE(verifier)
+
+      const params = new URLSearchParams({
+        client_id: CLIENT_ID,
+        redirect_uri: REDIRECT_URI,
+        response_type: 'code',
+        scope: 'openid profile email',
+        code_challenge: challenge,
+        code_challenge_method: 'S256',
+      })
+
+      window.location.href = `${OIDC_ISSUER}/authorize?${params.toString()}`
+    }
+
+    initiateLogin()
+  }, [])
+
+  return (
+    <div className="flex min-h-screen items-center justify-center">
+      <div className="text-center">
+        <h1 className="text-2xl font-bold mb-4">Redirecting to login...</h1>
+        <p className="text-gray-400">Please wait while we redirect you to the authentication provider.</p>
+      </div>
+    </div>
+  )
+}