Preserve post-login redirect for customer dashboard deep links.

Unauthenticated visits to protected pages now land on /login?redirect=…, and a shared helper keeps redirect targets same-origin only.

Co-authored-by: Cursor <cursoragent@cursor.com>

apps/customer/src/pages/LoginPage.tsx

@@ -17,19 +17,13 @@ import {
 } from '../services/authService'
 import { LanguageSelect, PasswordStrengthMeter, isPasswordStrong } from '@meshkee/dashboard-ui'
 import { useT } from '../i18n/useT'
+import { safeRedirectPath } from '../lib/redirect'
 import meshkeeLogo from '../assets/meshkee-logo.png'
 import styles from './LoginPage.module.css'
 
 type AuthView = 'login' | 'signup' | 'forgot' | 'otp'
 type SmsStep = 'phone' | 'code'
 
-function safeRedirectPath(value: string | null) {
-  if (!value || !value.startsWith('/') || value.startsWith('//')) {
-    return '/'
-  }
-  return value
-}
-
 export function LoginPage() {
   const navigate = useNavigate()
   const [searchParams] = useSearchParams()