🔗 Phishing-Guard: Anti-Phishing Domain Verification Indicator

[giftben1763-ui]

Summary

• Adds SecurityBanner (src/components/navigation/SecurityBanner.tsx), a self-contained anti-phishing indicator
• Checks window.location.hostname against an official domain registry (OFFICIAL_DOMAINS)
• Renders a small "Verified Domain" / "Unverified Domain" badge
• Shows a blocking full-screen warning overlay when the app is framed (window.self !== window.top, including cross-origin frame-access errors) or served from an unrecognised hostname, with a link to the official site and an explicit "continue anyway" acknowledgement
• Mounted globally in src/app/layout.tsx (fixed top-right) so it's active across the whole app

Technical Requirements (from #561)

• Check window.location.hostname against official domain registry
• Render visual security badge in top navigation bar
• Display warning overlay if app is loaded inside an iframe or unknown mirror

Test plan

• npx tsc --noEmit — no new errors introduced (pre-existing unrelated error in src/components/ui/Skeleton.tsx confirmed present on main too)
• npx eslint on changed files — no new errors (pre-existing unrelated errors in layout.tsx confirmed present on main too)
• Manual verification in a running browser (blocked in this environment — npm run build currently fails on main due to pre-existing, unrelated issues: a missing src/lib/queryClient module and a stale ErrorBoundary export in src/components/ui/index.ts)

Closes #561

🤖 Generated with Claude Code

[drips-wave]

@giftben1763-ui Great news! 🎉 Based on an automated assessment of this PR, the linked Wave issue(s) no longer count against your application limits.

You can now already apply to more issues while waiting for a review of this PR. Keep up the great work! 🚀

Learn more about application limits