[nourshoreibah]

What

Adds a help center at /help (served at branchaccounting.org/help once deployed): 11 short, numbered how-to guides, with screenshots that have a red box around each click target.

• Sections: Accounts, Expenses, Projects, Donors & donations, Reports. Admin-only guides carry an Admins tag.
• Steps: one line each. Page names in steps link to the page ([Expenses](/expenses) in guides.ts).
• Good to know: short product rules per guide, e.g. only approved expenses count toward spending, and deleting a project deletes its expenses, donations, staff and reports.
• Links into help: "Help" in the sidebar and on the login page.

How

• New open route class in lib/routes.ts for /help/**, readable signed in or out. AuthGate lets it through.
• providers.tsx renders open routes outside the Chakra/Auth shell. The help pages are prerendered with real content, and Chakra's Emotion styles inline into SSR HTML, which caused React hydration error fix(frontend): center the forgot and reset password pages #418.
• [slug]/page.tsx uses generateStaticParams, so every guide is its own static document. The existing CloudFront rewrite already maps /help/x to /help/x/index.html, so no infra change is needed.
• Screenshots come from a local stack with fictional seeded data. No production data and no real names.
• test/app/HelpGuides.test.ts fails on a missing screenshot, missing alt text, or a link to a page that doesn't exist.

Also fixed (separate commits)

• Lambda Dockerfiles never built shared/rbac or shared/store, so make up failed with Cannot find module '@branch/rbac'.
• api.ts: local dev routed any path with a query string (e.g. /expenditures?page=1) to the auth port. This affects local dev only; production uses NEXT_PUBLIC_API_BASE_URL.

Existing bugs found while capturing (not fixed here)

• /forgot-password content is unstyled and stuck flush-left.
• Expense table dates show one day early (UTC to local shift). The review dialog shows the right date.
• The expense amount field drops the decimal point: typing 185.40 gives 18,540.
• Profile page goes blank when /auth/mfa-status fails, because one failed call in Promise.all hides everything.
• Only admins can read admin notes, so "Needs Info" doesn't tell the submitter what's missing.
• docker-compose.yml pins the network name branch-network, so a second compose project (e.g. from a worktree) shares DNS with the main stack and its postgres host.

Checks

• Frontend jest: 428 passed, 2 skipped. tsc --noEmit and eslint are clean.
• npm run build exports /help plus 11 guide pages.
• Ran the static export in a browser: no console errors, links and tags render.

🤖 Generated with Claude Code