Load page.json by import, publish via fs, drop cookie auth

The editor no longer round-trips through /api/pages. Each route's
editor/page.tsx imports its own `../page.json` and hands it to
PageEditor as a prop, so the editor opens with the page already in
hand — no fetch, no loading state, no undo history seeded from a
placeholder. Globals still come from app.globals.json.

Publishing moves from `PUT /api/pages` to a `publishPage` server
action that writes the route's page.json with node:fs directly.
The target path is still built from the lib/pages.ts registry rather
than from the caller, so an unknown route key is rejected instead of
escaping app/.

Removes the customer account auth entirely: the httpOnly cookie
session, the /api/account/* handlers, the customer service and
GraphQL documents, the account-* blocks, and the /account/* routes.
The template has no auth, so nothing reads a cookie now.

Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01STGDvL4X7FhHHnxdRE2ayo

graphql/customer.ts

@@ -1,178 +0,0 @@
-// Customer account operations (classic Storefront customer accounts).
-// https://shopify.dev/docs/api/storefront/latest/objects/Customer
-import { gql } from '@shopify/hydrogen';
-
-const CustomerFragment = gql(`
-  fragment CustomerFragment on Customer {
-    id
-    email
-    firstName
-    lastName
-    phone
-    displayName
-    acceptsMarketing
-    createdAt
-    defaultAddress {
-      id
-      firstName
-      lastName
-      address1
-      address2
-      city
-      province
-      zip
-      country
-      phone
-    }
-  }
-`);
-
-export const CUSTOMER_QUERY = gql(
-  `
-  query GetCustomer($customerAccessToken: String!, $orderCount: Int!) {
-    customer(customerAccessToken: $customerAccessToken) {
-      ...CustomerFragment
-      orders(first: $orderCount, reverse: true) {
-        edges {
-          node {
-            id
-            orderNumber
-            processedAt
-            financialStatus
-            fulfillmentStatus
-            statusUrl
-            currentTotalPrice {
-              amount
-              currencyCode
-            }
-            lineItems(first: 5) {
-              edges {
-                node {
-                  title
-                  quantity
-                  variant {
-                    image {
-                      url
-                      altText
-                    }
-                  }
-                }
-              }
-            }
-          }
-        }
-      }
-    }
-  }
-`,
-  [CustomerFragment]
-);
-
-export const CUSTOMER_CREATE_MUTATION = gql(`
-  mutation CustomerCreate($input: CustomerCreateInput!) {
-    customerCreate(input: $input) {
-      customer {
-        id
-        email
-      }
-      customerUserErrors {
-        code
-        field
-        message
-      }
-    }
-  }
-`);
-
-export const CUSTOMER_ACCESS_TOKEN_CREATE_MUTATION = gql(`
-  mutation CustomerAccessTokenCreate($input: CustomerAccessTokenCreateInput!) {
-    customerAccessTokenCreate(input: $input) {
-      customerAccessToken {
-        accessToken
-        expiresAt
-      }
-      customerUserErrors {
-        code
-        field
-        message
-      }
-    }
-  }
-`);
-
-export const CUSTOMER_ACCESS_TOKEN_DELETE_MUTATION = gql(`
-  mutation CustomerAccessTokenDelete($customerAccessToken: String!) {
-    customerAccessTokenDelete(customerAccessToken: $customerAccessToken) {
-      deletedAccessToken
-      userErrors {
-        field
-        message
-      }
-    }
-  }
-`);
-
-// Sends the "reset your password" email.
-export const CUSTOMER_RECOVER_MUTATION = gql(`
-  mutation CustomerRecover($email: String!) {
-    customerRecover(email: $email) {
-      customerUserErrors {
-        code
-        field
-        message
-      }
-    }
-  }
-`);
-
-// Completes the reset using the id + token from the emailed link.
-export const CUSTOMER_RESET_MUTATION = gql(`
-  mutation CustomerReset($id: ID!, $input: CustomerResetInput!) {
-    customerReset(id: $id, input: $input) {
-      customerAccessToken {
-        accessToken
-        expiresAt
-      }
-      customerUserErrors {
-        code
-        field
-        message
-      }
-    }
-  }
-`);
-
-// Activation link sent to customers created by the merchant.
-export const CUSTOMER_ACTIVATE_MUTATION = gql(`
-  mutation CustomerActivate($id: ID!, $input: CustomerActivateInput!) {
-    customerActivate(id: $id, input: $input) {
-      customerAccessToken {
-        accessToken
-        expiresAt
-      }
-      customerUserErrors {
-        code
-        field
-        message
-      }
-    }
-  }
-`);
-
-export const CUSTOMER_UPDATE_MUTATION = gql(
-  `
-  mutation CustomerUpdate($customerAccessToken: String!, $customer: CustomerUpdateInput!) {
-    customerUpdate(customerAccessToken: $customerAccessToken, customer: $customer) {
-      customer {
-        ...CustomerFragment
-      }
-      customerUserErrors {
-        code
-        field
-        message
-      }
-    }
-  }
-`,
-  [CustomerFragment]
-);