feat: implement permissions and actions management

- Add permissions logic for status options in corrective actions.
- Create tests for permissions functionality.
- Implement queries for user authentication and actions management.
- Develop Actions page to display and manage corrective actions.
- Create authentication pages for login, setup, and password reset.
- Add IncidentDetail page to view incident details and associated actions.
- Implement Settings page for user management and password changes.

.env.example

@@ -10,6 +10,18 @@
 # The URL people open in their browser. Use https:// in production so session cookies are marked Secure.
 # PUBLIC_URL=http://localhost:3000
 
+# Email (sign-in links, password resets, invitations, notifications). Without it, emails are
+# printed to the server log in development and dropped in production.
+# SMTP_URL=smtps://user:password@smtp.example.com:465
+# MAIL_FROM=Open SafetyLog EHS <safety@example.com>
+
+# Time zone used for due dates and daily reminders, e.g. America/Chicago.
+# TZ=UTC
+
+# Where uploaded photos are stored, and the per-file size limit.
+# UPLOAD_DIR=./data/uploads
+# MAX_UPLOAD_MB=10
+
 # Docker Compose only: password for the bundled PostgreSQL container.
 # Use letters and numbers only (it is embedded in a connection URL).
 # POSTGRES_PASSWORD=change-me