flutter(rider): rebuild lib on Cubit/Bloc + Tripz backend (core + auth slice)

- keep store identity (com.mobileapp.store.ride, shorebird, firebase, fonts); old lib -> lib_old_getx
- core: config/di/router(go_router)/theme/api_client(dio+tenant+bearer)/token_store(secure)
- auth: repo + AuthCubit + OTP phone/otp screens; home: flutter_map (OSM placeholder, انطلق TODO)
- android usesCleartextTraffic=true for http API; maps=flutter_map (no Google), state=Cubit

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>

apps/rider/lib/controller/auth/certificate.dart

@@ -1,40 +0,0 @@
-import 'dart:convert';
-import 'dart:io';
-import 'dart:typed_data';
-import 'package:crypto/crypto.dart';
-
-Future<bool> verifyCertificateManually(
-    String host, int port, String expectedPin) async {
-  try {
-    final socket = await SecureSocket.connect(host, port,
-        timeout: const Duration(seconds: 5));
-
-    final certificate = socket.peerCertificate;
-    if (certificate == null) {
-      print("❌ لا يوجد شهادة.");
-      return false;
-    }
-
-    final der = certificate.der;
-    final actualPin = base64.encode(sha256.convert(der).bytes);
-
-    print("📛 HOST: $host");
-    print("📜 Subject: ${certificate.subject}");
-    print("📜 Issuer: ${certificate.issuer}");
-    print("📅 Valid From: ${certificate.startValidity}");
-    print("📅 Valid To: ${certificate.endValidity}");
-    print(
-        "🔐 Server Pin: $actualPin → ${actualPin == expectedPin ? '✅ MATCH' : '❌ MISMATCH'}");
-
-    socket.destroy();
-    return actualPin == expectedPin;
-  } catch (e) {
-    print("❌ خطأ أثناء الاتصال أو الفحص: $e");
-    return false;
-  }
-}
-
-/// تحويل المفتاح العام إلى بصمة SHA-256
-List<int> sha256Convert(Uint8List der) {
-  return sha256.convert(der).bytes;
-}