Fix email links broken in Outlook and standardize all email URLs

- Rewrite ctaButton to use td-background pattern (works in all clients
  including Outlook, Gmail, Yahoo, Apple Mail) instead of VML/conditional
  comments that broke link clicking in Outlook desktop
- Add plaintext fallback URL below every CTA button so users always have
  a working link even if the button fails
- Add getBaseUrl() and ensureAbsoluteUrl() helpers in email.ts to
  guarantee all email links are absolute https:// URLs
- Apply ensureAbsoluteUrl safety net in sendStyledNotificationEmail and
  sendNotificationEmail so relative paths can never reach email templates
- Standardize all NEXTAUTH_URL fallbacks to https://portal.monaco-opc.com
  (was inconsistently http://localhost:3000 or https://monaco-opc.com)
- Fix legacy notification.ts: wrong argument order in
  sendJuryInvitationEmail (URL was passed as name parameter)
- Fix legacy notification.ts: missing NEXTAUTH_URL fallback for
  evaluation reminder URL construction
- Change tooltip styling from red bg to white bg with black text

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

src/server/routers/user.ts

@@ -870,7 +870,7 @@ export const userRouter = router({
       const emailErrors: string[] = []
 
       if (input.sendInvitation) {
-        const baseUrl = process.env.NEXTAUTH_URL || 'http://localhost:3000'
+        const baseUrl = process.env.NEXTAUTH_URL || 'https://portal.monaco-opc.com'
         const expiryHours = await getInviteExpiryHours(ctx.prisma)
         const expiryMs = expiryHours * 60 * 60 * 1000
 
@@ -1025,7 +1025,7 @@ export const userRouter = router({
         },
       })
 
-      const baseUrl = process.env.NEXTAUTH_URL || 'http://localhost:3000'
+      const baseUrl = process.env.NEXTAUTH_URL || 'https://portal.monaco-opc.com'
       const inviteUrl = `${baseUrl}/accept-invite?token=${token}`
 
       // Send invitation email
@@ -1074,7 +1074,7 @@ export const userRouter = router({
         return { sent: 0, skipped: input.userIds.length }
       }
 
-      const baseUrl = process.env.NEXTAUTH_URL || 'http://localhost:3000'
+      const baseUrl = process.env.NEXTAUTH_URL || 'https://portal.monaco-opc.com'
       const expiryHours = await getInviteExpiryHours(ctx.prisma)
       const expiryMs = expiryHours * 60 * 60 * 1000
       let sent = 0
@@ -1478,7 +1478,7 @@ export const userRouter = router({
       })
 
       // Generate a callback URL for the magic link
-      const baseUrl = process.env.NEXTAUTH_URL || 'http://localhost:3000'
+      const baseUrl = process.env.NEXTAUTH_URL || 'https://portal.monaco-opc.com'
       const callbackUrl = `${baseUrl}/set-password`
 
       // We don't send the email here - the user will use the magic link form