Close remaining web gaps: rich profile, login history, lightbox/slider, flash client, admin chatlog/DJ/chart/WYSIWYG, niche API

- Rich profile (/u/[username]): wallet (credits/duckets/diamonds), friends
  grid (messenger_friendships), and owned rooms sections.
- Login history: new website_login_logs table (model + migration 0007),
  recorded on every successful sign-in (ip + user-agent), surfaced on a new
  /settings/sessions page (with failed-attempt list from failed_logins).
- Photos lightbox + home article slider (client components, no Swiper dep).
- /client/flash launcher (SSO ticket like the Nitro page).
- Admin: private chatlogs section in /admin/logs, /admin/radio/moderation
  (shout moderation), a "users by rank" inline bar chart on the dashboard,
  and a TinyMCE rich-text editor on the article admin forms.
- Niche API: /api/values/[id], /api/guilds(+/[id]), /api/radio/auto-play.

Verified live (prod, amx_test): login recorded → /settings/sessions shows
it with device; profile renders wallet/friends/rooms; dashboard chart +
private-chat logs + /client/flash + /api/guilds all OK. Reverted test data.
tsc 0, vitest 49/49, next build 0.

src/lib/auth.ts

@@ -57,6 +57,18 @@ export const { handlers, signIn, signOut, auth } = NextAuth({
           }
         }
 
+        // Record the successful login for the user's "session logs" page.
+        // Best-effort — never let logging block or fail the sign-in.
+        try {
+          const { headers } = await import("next/headers");
+          const ua = (await headers()).get("user-agent")?.slice(0, 512) ?? null;
+          await prisma.websiteLoginLogs.create({
+            data: { userId: user.id, ip: await clientIp(), userAgent: ua, createdAt: new Date() },
+          });
+        } catch {
+          /* ignore */
+        }
+
         return { id: String(user.id), name: user.username, rank: user.rank };
       },
     }),