refactor: full codebase overhaul — dead code removal, env validation, logger migration, date consolidation, Prisma schema cleanup, button consistency, useEffect deps, test coverage

- env.ts: added 10 missing Zod-validated env vars (imager, paypal currency, argon2/bcrypt params)
- Migrated 6 modules from process.env to validated env.* (auth, proxy-auth, paypal, password, redis, imager, moderation, alert, logger)
- Replaced console.warn/error with pino logger in 9 server-side modules
- Removed 50+ dead exports (SWF wrappers, coalesceHotelName, signIn, isStaff re-export, formatTimestamp, Skeleton/SkeletonCard, 4 unused housekeeping sections)
- Consolidated date formatting: 28 files migrated to shared formatDate() from @/lib/format-date
- Wired 4 radio/settings API routes through cached siteSettings service instead of raw Prisma queries
- Added getMany()/getAll() helpers to SiteSettings service
- Removed 88 dead Prisma model definitions (schema 2763→1846 lines)
- Created admin action-helper.ts with wrapAction() for standardized error handling
- Fixed useEffect dependency arrays in 4 data-heavy components
- Replaced raw btn CSS classes with shadcn Button component across admin pages
- Stripped dead i18n namespaces (common, pages.client) from all 22 translation files
- Removed 2 dead scripts (create-release.sh, check-local-imports.ts)
- Fixed knip.json configuration
- Added 7 new test suites: format-date, paypal, moderation, alert, webhook, action-helper, and fixed password.test.ts for env mocking
- All 358 tests passing across 72 test files
- TypeScript: 0 errors

src/env.ts

@@ -18,6 +18,11 @@ const schema = z.object({
 		.default(10_000),
 	HOTEL_NAME: z.string().default(FALLBACK_HOTEL_NAME),
 	APP_URL: z.string().url().default("http://localhost:3000"),
+	NEXT_PUBLIC_APP_URL: z.string().url().default("http://localhost:3000"),
+	// Public imager URL — overrides the default /imaging relative path.
+	NEXT_PUBLIC_IMAGER_URL: z.string().optional(),
+	// Upstream avatar imager proxy (defaults to Habbo's public imager).
+	IMAGING_UPSTREAM_URL: z.string().optional(),
 	// Resend API key (preferred — simpler HTTP API, always works).
 	RESEND_API_KEY: z.string().optional(),
 	// SMTP (password reset / notifications). Email features no-op if unset.
@@ -47,6 +52,12 @@ const schema = z.object({
 		.transform((v) => v === "true" || v === "1"),
 	// Hashing driver for NEW passwords: bcrypt (default, fits varchar(64)) | argon2id.
 	PASSWORD_HASH: z.enum(["bcrypt", "argon2id"]).optional(),
+	// Argon2id parameters (mirrors config/hashing.php).
+	ARGON2_PARALLELISM: z.coerce.number().int().positive().default(1),
+	ARGON2_ITERATIONS: z.coerce.number().int().positive().default(4),
+	ARGON2_MEMORY_SIZE: z.coerce.number().int().positive().default(65536),
+	// Bcrypt cost factor (rounds).
+	BCRYPT_ROUNDS: z.coerce.number().int().positive().default(12),
 	// Filesystem dir the badge uploader writes <code>.gif into (the emulator's
 	// badge image folder, e.g. .../assets/c_images/album1584). Upload is disabled
 	// when unset.
@@ -66,6 +77,8 @@ const schema = z.object({
 	PAYPAL_CLIENT_ID: z.string().optional(),
 	PAYPAL_SECRET: z.string().optional(),
 	PAYPAL_API: z.string().url().optional(),
+	PAYPAL_CURRENCY: z.string().default("USD"),
+	PAYPAL_CREDITS_PER_USD: z.coerce.number().positive().default(100),
 	// Redis — strongly recommended in production (required for multi-instance).
 	// Without it, rate limits / shared caches are in-process only.
 	REDIS_URL: z.string().optional(),