feat(auth): implement all 16 homepage/login/register review items

- add countArticles() (published-only, mirrors news-list) and warm total_articles
- localize homepage metadata; bind articleCount to both stats; unique photo alts
- drop duplicate news date and the mascot preload priorities
- extract shared AuthPageFrame/AuthUsersCards used by /login and /register
- login: localized noindex metadata, session redirect via safeRedirectPath,
  ?from passthrough from proxy, unified auth roster cache keys, registered notice
- register: localized metadata, session redirect to /me, unified cache keys
- add resend-verification flow on /verify with rate-limited non-enumerable action
- add safeRedirectPath() with unit tests
- register form: live requirements checklist + password mismatch guard
- login form: unverified state with resend-link CTA
- honour prefers-reduced-motion in TypewriterText
- add 6 translations across all 25 locales

src/proxy.ts

@@ -40,7 +40,11 @@ export const proxy = async (req: import("next/server").NextRequest) => {
 		: null;
 
 	if (shouldRedirectAdminRequest(pathname, token)) {
-		return NextResponse.redirect(new URL("/login", req.url));
+		// Carry the destination along so the sign-in form can send the visitor
+		// back to the page they asked for instead of dumping them on /me.
+		const login = new URL("/login", req.url);
+		login.searchParams.set("from", `${pathname}${req.nextUrl.search}`);
+		return NextResponse.redirect(login);
 	}
 
 	const nonce = createCspNonce();