fix: serve datastar locally and clean up session/route config

Replace CDN-hosted datastar beta.11 with local v1.0.0-RC.7 to fix
client-side expression incompatibilities with the Go SDK. Also fix
quoted CSS class keys in data-class expressions, harden session cookie
settings (named cookie, Secure flag), simplify SetupRoutes to not
return an error, and regenerate templ output.

features/auth/routes.go

@@ -8,11 +8,9 @@ import (
 	"github.com/ryanhamamura/c4/db/repository"
 )
 
-func SetupRoutes(router chi.Router, queries *repository.Queries, sessions *scs.SessionManager) error {
+func SetupRoutes(router chi.Router, queries *repository.Queries, sessions *scs.SessionManager) {
 	router.Get("/login", HandleLoginPage())
 	router.Get("/register", HandleRegisterPage())
 	router.Post("/auth/login", HandleLogin(queries, sessions))
 	router.Post("/auth/register", HandleRegister(queries, sessions))
-
-	return nil
 }