refactor: full codebase overhaul — dead code removal, env validation, logger migration, date consolidation, Prisma schema cleanup, button consistency, useEffect deps, test coverage

- env.ts: added 10 missing Zod-validated env vars (imager, paypal currency, argon2/bcrypt params)
- Migrated 6 modules from process.env to validated env.* (auth, proxy-auth, paypal, password, redis, imager, moderation, alert, logger)
- Replaced console.warn/error with pino logger in 9 server-side modules
- Removed 50+ dead exports (SWF wrappers, coalesceHotelName, signIn, isStaff re-export, formatTimestamp, Skeleton/SkeletonCard, 4 unused housekeeping sections)
- Consolidated date formatting: 28 files migrated to shared formatDate() from @/lib/format-date
- Wired 4 radio/settings API routes through cached siteSettings service instead of raw Prisma queries
- Added getMany()/getAll() helpers to SiteSettings service
- Removed 88 dead Prisma model definitions (schema 2763→1846 lines)
- Created admin action-helper.ts with wrapAction() for standardized error handling
- Fixed useEffect dependency arrays in 4 data-heavy components
- Replaced raw btn CSS classes with shadcn Button component across admin pages
- Stripped dead i18n namespaces (common, pages.client) from all 22 translation files
- Removed 2 dead scripts (create-release.sh, check-local-imports.ts)
- Fixed knip.json configuration
- Added 7 new test suites: format-date, paypal, moderation, alert, webhook, action-helper, and fixed password.test.ts for env mocking
- All 358 tests passing across 72 test files
- TypeScript: 0 errors

src/app/(site)/settings/sessions/page.tsx

@@ -3,16 +3,13 @@ import { getTranslations } from "next-intl/server";
 import { signOutEverywhere } from "@/actions/sessions";
 import { ContentCard, EmptyState } from "@/components/public/ui";
 import { auth } from "@/lib/auth";
+import { formatDate } from "@/lib/format-date";
 import { prisma } from "@/lib/prisma";
 
 export const dynamic = "force-dynamic";
 
 type SearchParams = Promise<{ signedOutAll?: string }>;
 
-function fromDate(d: Date | null | undefined): string {
-	return d ? d.toISOString().slice(0, 16).replace("T", " ") : "—";
-}
-
 /** Tiny user-agent → "Browser on OS" summary (no dependency). */
 function deviceLabel(ua: string | null, unknown: string): string {
 	if (!ua) return unknown;
@@ -123,7 +120,7 @@ export default async function SessionsPage({
 							{logins.map((l) => (
 								<tr key={String(l.id)}>
 									<td className="muted" style={{ whiteSpace: "nowrap" }}>
-										{fromDate(l.createdAt)}
+										{formatDate(l.createdAt)}
 									</td>
 									<td className="muted">{l.ip}</td>
 									<td>{deviceLabel(l.userAgent, t("unknownDevice"))}</td>
@@ -151,9 +148,7 @@ export default async function SessionsPage({
 							{failed.map((f) => (
 								<tr key={f.id}>
 									<td className="muted" style={{ whiteSpace: "nowrap" }}>
-										{typeof f.attempted_at === "string"
-											? f.attempted_at.slice(0, 16).replace("T", " ")
-											: fromDate(f.attempted_at)}
+									{formatDate(typeof f.attempted_at === "string" ? new Date(f.attempted_at) : f.attempted_at)}
 									</td>
 									<td className="muted">{f.ip_address}</td>
 								</tr>