Reapply "Add missing admin action files and navigation links"

This reverts commit 4d515bc400.

src/lib/services/alert.ts

@@ -66,11 +66,7 @@ function alertEmail(): string | undefined {
 }
 
 function escapeHtml(s: string): string {
-  return s
-    .replace(/&/g, "&")
-    .replace(/</g, "&lt;")
-    .replace(/>/g, "&gt;")
-    .replace(/"/g, "&quot;");
+  return s.replace(/&/g, "&amp;").replace(/</g, "&lt;").replace(/>/g, "&gt;").replace(/"/g, "&quot;");
 }
 
 /**
@@ -144,9 +140,7 @@ async function emailStaff(input: SendAlertInput): Promise<boolean> {
   const html =
     `<h2 style="margin:0 0 8px">${escapeHtml(input.type)} — ${escapeHtml(String(input.severity))}</h2>` +
     `<p style="margin:0 0 12px">${escapeHtml(input.message)}</p>` +
-    (contextRows
-      ? `<table style="border-collapse:collapse;font-size:13px">${contextRows}</table>`
-      : "") +
+    (contextRows ? `<table style="border-collapse:collapse;font-size:13px">${contextRows}</table>` : "") +
     `<p style="margin-top:16px;color:#888;font-size:12px">` +
     `Sent by ${escapeHtml(env.HOTEL_NAME)} · <a href="${env.APP_URL}/admin/alerts">view alerts</a></p>`;
 
@@ -166,10 +160,7 @@ async function emailStaff(input: SendAlertInput): Promise<boolean> {
  */
 export async function sendAlert(input: SendAlertInput): Promise<SendAlertResult> {
   // Fan out Discord + email first so we can record their outcome on the row.
-  const [sentViaDiscord, sentViaEmail] = await Promise.all([
-    postDiscord(input),
-    emailStaff(input),
-  ]);
+  const [sentViaDiscord, sentViaEmail] = await Promise.all([postDiscord(input), emailStaff(input)]);
 
   let logged = false;
   try {