🔄 refactor(steam): Migrate to Steam OpenID authentication and official Web API (#282)

## Description
<!-- Briefly describe the purpose and scope of your changes -->


<!-- This is an auto-generated comment: release notes by coderabbit.ai
-->
## Summary by CodeRabbit

- **New Features**
- Added support for managing multiple Steam profiles per user, including
a new profiles page with avatar selection and profile management.
- Introduced a streamlined Steam authentication flow using a popup
window, replacing the previous QR code and team-based login.
- Added utilities for Steam image handling and metadata, including
avatar preloading and static Steam metadata mappings.
  - Enhanced OpenID verification for Steam login.
- Added new image-related events and expanded event handling for Steam
account updates and image processing.

- **Improvements**
- Refactored the account structure from teams to profiles, updating
related UI, context, and storage.
- Updated API headers and authentication logic to use Steam IDs instead
of team IDs.
- Expanded game metadata with new fields for categories, franchises, and
social links.
- Improved library and category schemas for richer game and profile
data.
- Simplified and improved Steam API client methods for fetching user
info, friends, and game libraries using Steam Web API.
- Updated queue processing to handle individual game updates and publish
image events.
- Adjusted permissions and queue configurations for better message
handling and dead-letter queue support.
  - Improved slug creation and rating estimation utilities.

- **Bug Fixes**
- Fixed avatar image loading to display higher quality images after
initial load.

- **Removals**
- Removed all team, member, and credential management functionality and
related database schemas.
  - Eliminated the QR code-based login and related UI components.
  - Deleted legacy team and member database tables and related code.
- Removed encryption utilities and deprecated secret keys in favor of
new secret management.

- **Chores**
- Updated dependencies and internal configuration for new features and
schema changes.
- Cleaned up unused code and updated database migrations for new data
structures.
- Adjusted import orders and removed unused imports across multiple
modules.
- Added new resource declarations and updated service link
configurations.
<!-- end of auto-generated comment: release notes by coderabbit.ai -->

packages/core/src/utils/index.ts

@@ -1,6 +1,5 @@
+export * from "./id"
 export * from "./fn"
 export * from "./log"
-export * from "./id"
 export * from "./invite"
-export * from "./token"
 export * from "./helper"

packages/core/src/utils/token.ts

@@ -1,58 +0,0 @@
-import { z } from 'zod';
-import { fn } from './fn';
-import crypto from 'crypto';
-import { Resource } from 'sst';
-
-// This is a 32-character random ASCII string
-const rawKey = Resource.SteamEncryptionKey.value;
-
-// Turn it into exactly 32 bytes via UTF-8
-const key = Buffer.from(rawKey, 'utf8');
-if (key.length !== 32) {
-    throw new Error(
-        `SteamEncryptionKey must be exactly 32 bytes; got ${key.length}`
-    );
-}
-
-const ENCRYPTION_IV_LENGTH = 12; // 96 bits for GCM
-
-export namespace Token {
-    export const encrypt = fn(
-        z.string().min(4),
-        (token) => {
-            const iv = crypto.randomBytes(ENCRYPTION_IV_LENGTH);
-            const cipher = crypto.createCipheriv('aes-256-gcm', key, iv);
-
-            const ciphertext = Buffer.concat([
-                cipher.update(token, 'utf8'),
-                cipher.final(),
-            ]);
-            const tag = cipher.getAuthTag();
-
-            return ['v1', iv.toString('hex'), tag.toString('hex'), ciphertext.toString('hex')].join(':');
-        });
-
-    export const decrypt = fn(
-        z.string().min(4),
-        (data) => {
-            const [version, ivHex, tagHex, ciphertextHex] = data.split(':');
-            if (version !== 'v1' || !ivHex || !tagHex || !ciphertextHex) {
-                throw new Error('Invalid token format');
-            }
-
-            const iv = Buffer.from(ivHex, 'hex');
-            const tag = Buffer.from(tagHex, 'hex');
-            const ciphertext = Buffer.from(ciphertextHex, 'hex');
-
-            const decipher = crypto.createDecipheriv('aes-256-gcm', key, iv);
-            decipher.setAuthTag(tag);
-
-            const plaintext = Buffer.concat([
-                decipher.update(ciphertext),
-                decipher.final(),
-            ]);
-
-            return plaintext.toString('utf8');
-        });
-        
-}