flutter(rider): rebuild lib on Cubit/Bloc + Tripz backend (core + auth slice)

- keep store identity (com.mobileapp.store.ride, shorebird, firebase, fonts); old lib -> lib_old_getx
- core: config/di/router(go_router)/theme/api_client(dio+tenant+bearer)/token_store(secure)
- auth: repo + AuthCubit + OTP phone/otp screens; home: flutter_map (OSM placeholder, انطلق TODO)
- android usesCleartextTraffic=true for http API; maps=flutter_map (no Google), state=Cubit

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>

apps/rider/lib/core/api/api_client.dart

@@ -0,0 +1,27 @@
+import 'package:dio/dio.dart';
+import '../config.dart';
+import '../storage/token_store.dart';
+
+/// عميل HTTP لكل نداءات الـ API — يحقن x-tenant-id و Bearer تلقائياً.
+class ApiClient {
+  final Dio dio;
+
+  ApiClient(TokenStore store)
+      : dio = Dio(BaseOptions(
+          baseUrl: AppConfig.baseUrl,
+          connectTimeout: const Duration(seconds: 15),
+          receiveTimeout: const Duration(seconds: 20),
+          headers: {'Content-Type': 'application/json'},
+        )) {
+    dio.interceptors.add(InterceptorsWrapper(
+      onRequest: (options, handler) async {
+        options.headers['x-tenant-id'] = AppConfig.tenantSlug;
+        final token = await store.access();
+        if (token != null && token.isNotEmpty) {
+          options.headers['Authorization'] = 'Bearer $token';
+        }
+        handler.next(options);
+      },
+    ));
+  }
+}