Initial commit: Flutter app + PHP/MySQL backend on Hostinger

Replaces Firebase with a self-hosted PHP/MySQL API served from
winded.prymsolutions.com. Includes full backend (schema, auth, events,
teams, brackets, suggestions, stats, media, file upload) and updated
Flutter repositories and domain models.

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

server/api/auth/login.php

@@ -0,0 +1,38 @@
+<?php
+require_once __DIR__ . '/../config/helpers.php';
+cors();
+
+if ($_SERVER['REQUEST_METHOD'] !== 'POST') json_err('Method not allowed', 405);
+
+$b        = body();
+$email    = trim($b['email'] ?? '');
+$password = $b['password'] ?? '';
+
+if ($email === '' || $password === '') json_err('Email and password required');
+
+$db   = db();
+$stmt = $db->prepare('SELECT * FROM users WHERE email = ?');
+$stmt->execute([$email]);
+$row  = $stmt->fetch();
+
+if (!$row || !password_verify($password, $row['password_hash'])) {
+    json_err('Invalid email or password', 401);
+}
+
+$role  = resolve_role($row['email'], $row['role']);
+$token = JWT::encode(['uid' => $row['id'], 'email' => $row['email'], 'role' => $role]);
+
+json_ok([
+    'token' => $token,
+    'user'  => [
+        'id'           => $row['id'],
+        'email'        => $row['email'],
+        'display_name' => $row['display_name'],
+        'role'         => $role,
+        'bio'          => $row['bio'],
+        'photo_url'    => $row['photo_url'],
+        'position'     => $row['position'],
+        'team_id'      => $row['team_id'],
+        'created_at'   => $row['created_at'],
+    ],
+]);