P1-P3 admin cleanup: rank guard, SSRF guard, count caching, dead code removal, pagination rewrite

- P1: new src/lib/admin/rank-guard.ts with tryGuardRank/guardRank + RankGuardTarget/Result; extracted from users.ts; applied to admin-bans (create/lift + rank redirect) and admin-badges (caps + rank guard + error surfacing); import-url-safety.ts SSRF guard wired into clone save+icon fetch; logAudit await in help-tickets; antiddos mutations SETTINGS_EDIT; markAllAlertsRead NOTIFICATIONS_EDIT; rankError/saveError in all 25 message files; tests rew/new for bans/badges/rank-guard/import-url-safety

- P2: ticket-inbox merged pagination reworked to single UNION ALL SQL with LIMIT/OFFSET (avoids O(offset) materialization); getCachedAdminCount with cacheFiltered option applied to devops/errors/photos/items/guilds/help-tickets/moderation pages; admin-theme catches→?error=1+banner+25 locales; logger in silent catches (rare-values/writeable-boxes); catalog-items-loader CAST→plain equality; count caching helper extended with opt-in cacheFiltered

- P3: removed dead modules is-staff/notice/recent-furni-resync/log-filters plus load-user-sanctions/user-sanction-timeline; removed orphaned CATALOG_PAGE_COLUMNS re-export; removed getFurniIconUrl from studio-furni-icons

Build: lint 0, typecheck 0, 3480 tests pass, i18n:check exit 0, colors exit 0. Circular chunk warning (9452/10535/66463) is webpack code-splitting artifact; build succeeds.

src/actions/admin-rare-values.ts

@@ -6,6 +6,7 @@ import { requirePermission } from "@/lib/admin/guard";
 import { db, WebsiteRareValueCategories, WebsiteRareValues } from "@/lib/db";
 import { EDGE_CACHE_TAGS, purgeEdgeCache } from "@/lib/edge-cache";
 import { formPositiveBigInt } from "@/lib/form-data";
+import { logger } from "@/lib/logger";
 import { PERMS } from "@/lib/permissions";
 
 export async function createCategory(formData: FormData): Promise<void> {
@@ -31,8 +32,9 @@ export async function createCategory(formData: FormData): Promise<void> {
 			badge,
 			priority,
 		});
-	} catch {
-		// Unique name collision or DB error — ignore, page will re-render unchanged.
+	} catch (err) {
+		// Unique name collision or DB error — page re-renders unchanged.
+		logger.error("Failed to create rare-value category", { err });
 	}
 	revalidatePath("/admin/rare-values");
 	void purgeEdgeCache([EDGE_CACHE_TAGS.public], "rare values edited");
@@ -51,8 +53,8 @@ export async function deleteCategory(formData: FormData): Promise<void> {
 		await db
 			.delete(WebsiteRareValueCategories)
 			.where(eq(WebsiteRareValueCategories.id, id));
-	} catch {
-		// Not found or DB error — ignore.
+	} catch (err) {
+		logger.error("Failed to delete rare value", { err });
 	}
 	revalidatePath("/admin/rare-values");
 	void purgeEdgeCache([EDGE_CACHE_TAGS.public], "rare values edited");
@@ -100,8 +102,8 @@ export async function createValue(formData: FormData): Promise<void> {
 			currencyType,
 			furnitureIcon,
 		});
-	} catch {
-		// DB error — ignore.
+	} catch (err) {
+		logger.error("Failed to persist rare value", { err });
 	}
 	revalidatePath("/admin/rare-values");
 	void purgeEdgeCache([EDGE_CACHE_TAGS.public], "rare values edited");
@@ -114,8 +116,8 @@ export async function deleteValue(formData: FormData): Promise<void> {
 
 	try {
 		await db.delete(WebsiteRareValues).where(eq(WebsiteRareValues.id, id));
-	} catch {
-		// Not found or DB error — ignore.
+	} catch (err) {
+		logger.error("Failed to delete rare value", { err });
 	}
 	revalidatePath("/admin/rare-values");
 	void purgeEdgeCache([EDGE_CACHE_TAGS.public], "rare values edited");
@@ -146,8 +148,8 @@ export async function updateCategory(formData: FormData): Promise<void> {
 			.update(WebsiteRareValueCategories)
 			.set({ name, badge, priority })
 			.where(eq(WebsiteRareValueCategories.id, id));
-	} catch {
-		// Unique name collision or DB error — ignore.
+	} catch (err) {
+		logger.error("Failed to update rare-value category", { err });
 	}
 	revalidatePath("/admin/rare-values");
 	void purgeEdgeCache([EDGE_CACHE_TAGS.public], "rare values edited");
@@ -201,8 +203,8 @@ export async function updateValue(formData: FormData): Promise<void> {
 			.update(WebsiteRareValues)
 			.set(sets)
 			.where(eq(WebsiteRareValues.id, id));
-	} catch {
-		// DB error — ignore.
+	} catch (err) {
+		logger.error("Failed to persist rare value", { err });
 	}
 	revalidatePath("/admin/rare-values");
 	void purgeEdgeCache([EDGE_CACHE_TAGS.public], "rare values edited");