Remove argon2id, use bcrypt-only password hashing

.env.example

@@ -28,12 +28,11 @@ AUTH_URL=http://localhost:3002
 IMAGING_UPSTREAM_URL=http://127.0.0.1:3030/imaging
 NEXT_PUBLIC_IMAGER_URL=http://localhost:3002/imaging
 
-# --- SECURITY & HASHING (High Performance) ---
+# --- SECURITY & HASHING ---
 AUTH_SECRET=your-super-secret-auth-key-change-this-min-32-chars
 APP_KEY=base64:your-app-key-here=
 CONVERT_PASSWORDS=true
-PASSWORD_HASH=argon2id
-BCRYPT_ROUNDS=10
+BCRYPT_ROUNDS=12
 
 # --- PATHS ---
 BADGE_UPLOAD_DIR=./public/assets/images/badges