Problem
Users can log in but there's no way to log out. `authStore.logout()` exists but no UI element triggers it. The sidebar has no user indicator at all — you can't tell who you're logged in as.
Solution
Add a user menu to the sidebar footer showing:
When auth is disabled, hide the user menu entirely.