fix: harden admin actions, search, sanitization and repo hygiene

- Split approve/dismiss application workflows with distinct audit logs,
  rate-limited guards and real error logging
- Validate article status/date/id input and stop resetting publishedAt
  on every update
- Validate guild updates (state, forum enums, non-empty name) behind
  rate-limited guard
- Fix scheduled-article publishing (ignore NULL dates, set updatedAt,
  type-safe predicates)
- Harden admin search API (LIKE escaping, query cap, per-user
  rate limit, round-robin result cap) and fix search dialog
  abort/res.ok/loading races
- Lock down HTML sanitizer to an allowlist profile and add XSS tests
- Improve mobile nav accessibility (unique id, dialog role, focus
  management, scroll lock, outside close)
- Log swallowed server errors instead of silent catch blocks
- Remove dead eslint config, drop unused dompurify deps, restore knip
  CI step, add Playwright config with smoke spec

src/app/admin/page.tsx

@@ -13,6 +13,7 @@ import Link from "@/components/link";
 import { unixNow } from "@/lib/bans";
 import { Ban, db, StaffActivities, User, WebsiteArticles } from "@/lib/db";
 import { formatDate } from "@/lib/format-date";
+import { logServerError } from "@/lib/server-log";
 
 type RankCount = { rank: number; count: number };
 
@@ -37,7 +38,9 @@ export default async function AdminDashboard() {
 		online = onlineRow[0]?.total ?? 0;
 		articles = articlesRow[0]?.total ?? 0;
 		bans = bansRow[0]?.total ?? 0;
-	} catch {}
+	} catch (error) {
+		logServerError("admin.dashboard_stats_failed", error);
+	}
 	const dbOk = users >= 0;
 
 	const rankGroups = await db