fix: show login page before needsSetup guard for unauthenticated users

Unauthenticated users saw a blank screen because the needsSetup null-guard
fired before the LoginPage render check. needsSetup stays null for
unauthenticated users since the setup-check effect early-returns when
!session. Now the login check runs first so users see the login page.

Co-Authored-By: Paperclip <noreply@paperclip.ing>

apps/web/src/App.tsx

@@ -249,14 +249,14 @@ export function App() {
     return <Navigate to="/login" replace />;
   }
 
-  // Production: need setup check
-  if (needsSetup === null) return null;
-
-  // Production mode: if no session, redirect to Authentik sign-in
+  // Show login BEFORE checking needsSetup (needsSetup is never set for unauthenticated users)
   if (!authDisabled && !session) {
     return <LoginPage />;
   }
 
+  // Production: need setup check
+  if (needsSetup === null) return null;
+
   // Redirect to setup wizard if needed
   if (needsSetup) {
     return <Navigate to="/setup" replace />;