**Description:** - `POST /auth/login` - Verify email + password - Check user is ACTIVE - Return: `{ accessToken, refreshToken, user }` — access token TTL 15min, refresh token TTL 7d - Store refresh token hash in Redis ---
Description:
POST /auth/login{ accessToken, refreshToken, user }— access token TTL 15min, refresh token TTL 7d