Configure VM services and fix auth flow

- point MySQL and Whisper settings to the VM
- add VM MySQL bootstrap scripts and docs
- allow LAN Vite origins for CORS
- fix Express 5 validation assignment crash
- allow login with username or email
- prevent recursive auth refresh retries

backend/.env.example

@@ -0,0 +1,24 @@
+NODE_ENV=development
+HOST=127.0.0.1
+PORT=4000
+CLIENT_ORIGIN=http://localhost:5173
+
+DB_HOST=192.168.X.X
+DB_PORT=3306
+DB_NAME=orphion
+DB_USER=orphion
+DB_PASSWORD=change_me
+DB_AUTO_MIGRATE=true
+
+JWT_ACCESS_SECRET=replace-with-a-long-random-access-secret
+JWT_REFRESH_SECRET=replace-with-a-different-long-random-refresh-secret
+JWT_COOKIE_SECURE=false
+
+WHISPER_VM_IP=192.168.X.X
+WHISPER_VM_PORT=8000
+WHISPER_API_URL=http://192.168.X.X:8000
+WHISPER_ALLOW_MOCK=false
+
+STORAGE_DRIVER=smb
+STORAGE_BASE_PATH=/mnt/orphion-audio
+MAX_AUDIO_SIZE_MB=200