feat: default locale Russian, geo determines language for other countries

- localization-svc: defaultLocale ru, resolveLocale only by geo
- web-svc: DEFAULT_LOCALE ru, layout lang=ru, embeddedTranslations fallback ru
- countryToLocale: default ru when no country or unknown country

Co-authored-by: Cursor <cursoragent@cursor.com>

services/auth-svc/package.json

@@ -0,0 +1,33 @@
+{
+  "name": "auth-svc",
+  "version": "1.0.0",
+  "private": true,
+  "type": "module",
+  "description": "Auth service: SSO, JWT, Bearer validation for API-to-API",
+  "scripts": {
+    "dev": "tsx watch src/index.ts",
+    "build": "tsc",
+    "start": "node dist/index.js",
+    "db:generate": "npx @better-auth/cli generate",
+    "db:migrate": "npx @better-auth/cli migrate --yes"
+  },
+  "dependencies": {
+    "dotenv": "^16.4.5",
+    "@better-auth/sso": "^1.3.0",
+    "better-auth": "^1.4.0",
+    "better-auth-credentials-plugin": "^0.4.0",
+    "better-sqlite3": "^11.9.1",
+    "cors": "^2.8.5",
+    "express": "^4.21.0",
+    "ldap-authentication": "^3.3.6",
+    "zod": "^3.23.0"
+  },
+  "devDependencies": {
+    "@types/better-sqlite3": "^7.6.12",
+    "@types/cors": "^2.8.17",
+    "@types/express": "^4.17.21",
+    "@types/node": "^22.10.0",
+    "tsx": "^4.19.2",
+    "typescript": "^5.7.2"
+  }
+}