POST /api/mobile/auth
Body: { email: string password: string twoFactorCode?: string // Optionnel, requis si 2FA activé }
POST /api/mobile/auth
Body: { email: string password: string twoFactorCode?: string // Optionnel, requis si 2FA activé }