BGI HRMS Auth Guard Fix

Problem fixed:
Direct hit on /admin/hrms/ was opening dashboard without HRMS login because index.php/complete_dashboard.php and several admin pages did not include auth guard.

What changed:
- Added require_once __DIR__ . '/_standalone_auth.php'; to admin/hrms pages.
- Excluded login.php, logout.php and helper/include files.
- Hardened _standalone_auth.php with no-cache headers and active user verification.
- Added admin/hrms/.htaccess to disable directory listing.

After upload:
1. Overwrite files from this ZIP.
2. Clear browser cache or open private window.
3. Hit /admin/hrms/ directly.
4. It must redirect to /admin/hrms/login.php.