P1-P3 admin cleanup: rank guard, SSRF guard, count caching, dead code removal, pagination rewrite

- P1: new src/lib/admin/rank-guard.ts with tryGuardRank/guardRank + RankGuardTarget/Result; extracted from users.ts; applied to admin-bans (create/lift + rank redirect) and admin-badges (caps + rank guard + error surfacing); import-url-safety.ts SSRF guard wired into clone save+icon fetch; logAudit await in help-tickets; antiddos mutations SETTINGS_EDIT; markAllAlertsRead NOTIFICATIONS_EDIT; rankError/saveError in all 25 message files; tests rew/new for bans/badges/rank-guard/import-url-safety

- P2: ticket-inbox merged pagination reworked to single UNION ALL SQL with LIMIT/OFFSET (avoids O(offset) materialization); getCachedAdminCount with cacheFiltered option applied to devops/errors/photos/items/guilds/help-tickets/moderation pages; admin-theme catches→?error=1+banner+25 locales; logger in silent catches (rare-values/writeable-boxes); catalog-items-loader CAST→plain equality; count caching helper extended with opt-in cacheFiltered

- P3: removed dead modules is-staff/notice/recent-furni-resync/log-filters plus load-user-sanctions/user-sanction-timeline; removed orphaned CATALOG_PAGE_COLUMNS re-export; removed getFurniIconUrl from studio-furni-icons

Build: lint 0, typecheck 0, 3480 tests pass, i18n:check exit 0, colors exit 0. Circular chunk warning (9452/10535/66463) is webpack code-splitting artifact; build succeeds.

src/app/admin/moderation/page.tsx

@@ -16,6 +16,7 @@ import { Card, CardContent, CardHeader, CardTitle } from "@/components/ui/card";
 import { getMinStaffRank } from "@/lib/admin/min-staff-rank";
 import { AdminAuditLog, Ban, db, SupportTickets, User } from "@/lib/db";
 import { canAccess, getAdminContext, PERMS } from "@/lib/permissions";
+import { getCachedAdminCount } from "@/lib/services/admin-stats";
 
 const CFH_STATES: Record<number, { label: string; class: string }> = {
 	0: {
@@ -39,25 +40,31 @@ export default async function ModerationDashboard() {
 	const minStaffRank = await getMinStaffRank();
 
 	const [
-		openCfhRows,
-		pickedCfhRows,
-		todayBansRows,
+		openCfh,
+		pickedCfh,
+		todayBans,
 		modsOnlineRows,
 		recentCfh,
 		recentModActions,
 	] = await Promise.all([
-		db
-			.select({ total: count() })
-			.from(SupportTickets)
-			.where(eq(SupportTickets.state, 0)),
-		db
-			.select({ total: count() })
-			.from(SupportTickets)
-			.where(eq(SupportTickets.state, 1)),
-		db
-			.select({ total: count() })
-			.from(Ban)
-			.where(gte(Ban.timestamp, todayStart)),
+		getCachedAdminCount(
+			SupportTickets,
+			"moderation_open_cfh",
+			eq(SupportTickets.state, 0),
+			{ cacheFiltered: true },
+		),
+		getCachedAdminCount(
+			SupportTickets,
+			"moderation_picked_cfh",
+			eq(SupportTickets.state, 1),
+			{ cacheFiltered: true },
+		),
+		getCachedAdminCount(
+			Ban,
+			"moderation_today_bans",
+			gte(Ban.timestamp, todayStart),
+			{ cacheFiltered: true },
+		),
 		db
 			.select({ total: count() })
 			.from(User)
@@ -81,9 +88,6 @@ export default async function ModerationDashboard() {
 			.limit(10),
 	]);
 
-	const openCfh = Number(openCfhRows[0]?.total ?? 0);
-	const pickedCfh = Number(pickedCfhRows[0]?.total ?? 0);
-	const todayBans = Number(todayBansRows[0]?.total ?? 0);
 	const modsOnline = Number(modsOnlineRows[0]?.total ?? 0);
 
 	// Fetch usernames for CFH tickets