Add dark mode, i18n, messenger/moderation/verify, admin CRUD parity

Web-tier features completing the AtomCMS→Next.js conversion (slice 2):

UI/UX:
- Dark mode: html.dark CSS-var overrides + ThemeSwitcher (localStorage,
  no-flash boot script) wired into the nav.
- i18n (next-intl, cookie-based / no URL routing): en + it catalogs,
  request.ts, provider in root layout, LanguageSwitcher; shell (nav,
  header, footer) fully translated. URLs + access-guard unchanged.
- globals.css: --muted/--border aliases used across admin pages.

User features:
- /messages: offline messages + friend-request accept (server action
  re-reads session, two directional rows, idempotent).
- Email verification: signed-token /verify route + sendVerification wired
  into register (best-effort, never blocks signup).
- Article reactions: toggle UI on news/[slug] + server action.
- Content moderation service (website_wordfilter + optional OpenAI
  moderations, fail-open) wired into article comments + guestbook.

Admin CRUD parity (Filament replacement):
- /admin/shop (+ new/[id]) packages CRUD + read-only orders.
- /admin/transactions read-only PayPal log.
- /admin/permissions, /admin/tags, /admin/ads (+ new/[id]),
  /admin/help-questions (+ new/[id]), /admin/radio/history,
  /admin/users/[id]/edit. All gated by requireStaff + logStaffActivity.

Verified: tsc 0, vitest 48/48, next build 0 (all routes incl. new
admin CRUD + /messages + /verify).

src/app/admin/permissions/page.tsx

@@ -1,25 +1,29 @@
+import {
+  createPermission,
+  deletePermission,
+  updatePermission,
+} from "@/actions/admin-permissions";
 import { prisma } from "@/lib/prisma";
 
 export const dynamic = "force-dynamic";
 
-// NOTE: The emulator's standalone `permissions` table is not present in the
-// Prisma schema (there is no `prisma.permissions` accessor). The real,
-// queryable rank-permission table in this schema is `website_housekeeping_permissions`
-// (model WebsiteHousekeepingPermissions), which gates each permission by the
-// minimum rank that holds it — exactly the rank-permission data this page lists.
+// Manages website_permissions (model WebsitePermissions) — the CMS-owned
+// rank-permission mapping AtomCMS exposes in admin. Each row is a key with an
+// optional value and comment; those are the only editable columns on the table.
 type PermissionRow = {
   id: bigint;
-  permission: string;
-  minRank: number;
-  description: string | null;
+  key: string;
+  value: string | null;
+  comment: string | null;
 };
 
 export default async function AdminPermissions() {
   let permissions: PermissionRow[] = [];
   try {
-    permissions = await prisma.websiteHousekeepingPermissions.findMany({
-      select: { id: true, permission: true, minRank: true, description: true },
-      orderBy: [{ minRank: "asc" }, { permission: "asc" }],
+    permissions = await prisma.websitePermissions.findMany({
+      select: { id: true, key: true, value: true, comment: true },
+      orderBy: { key: "asc" },
+      take: 500,
     });
   } catch {
     permissions = [];
@@ -29,29 +33,87 @@ export default async function AdminPermissions() {
     <main>
       <h1>Permissions</h1>
       <p className="muted">
-        Read-only view of rank permissions. Each entry is the minimum rank that
-        grants the permission.
+        CMS-owned rank permissions (<code>website_permissions</code>). Each entry
+        maps a permission key to its value/name and an optional comment.
       </p>
 
+      <form action={createPermission} className="card" style={{ marginBottom: "1.5rem" }}>
+        <h3 style={{ marginTop: 0 }}>Add / overwrite permission</h3>
+        <div style={{ display: "flex", gap: "0.5rem", flexWrap: "wrap" }}>
+          <input name="key" placeholder="key" required maxLength={255} />
+          <input
+            name="value"
+            placeholder="value / name"
+            maxLength={255}
+            style={{ flex: 1, minWidth: 160 }}
+          />
+          <input name="comment" placeholder="comment" maxLength={255} />
+          <button type="submit" className="btn btn-primary">
+            Save
+          </button>
+        </div>
+      </form>
+
       {permissions.length === 0 ? (
         <p className="muted">No permissions found.</p>
       ) : (
-        <table>
+        <table style={{ width: "100%", borderCollapse: "collapse" }}>
           <thead>
-            <tr>
+            <tr style={{ textAlign: "left", color: "var(--muted)" }}>
               <th>ID</th>
-              <th>Permission</th>
-              <th>Min rank</th>
-              <th>Description</th>
+              <th>Key</th>
+              <th>Value</th>
+              <th>Comment</th>
+              <th />
             </tr>
           </thead>
           <tbody>
             {permissions.map((p) => (
-              <tr key={String(p.id)}>
+              <tr key={String(p.id)} style={{ borderTop: "1px solid var(--border)" }}>
                 <td>{String(p.id)}</td>
-                <td>{p.permission}</td>
-                <td>{p.minRank}</td>
-                <td className="muted">{p.description ?? "—"}</td>
+                <td>
+                  <form
+                    id={`perm-${String(p.id)}`}
+                    action={updatePermission}
+                    style={{ display: "contents" }}
+                  >
+                    <input type="hidden" name="id" value={String(p.id)} />
+                    <input name="key" defaultValue={p.key} required maxLength={255} />
+                  </form>
+                </td>
+                <td>
+                  <input
+                    form={`perm-${String(p.id)}`}
+                    name="value"
+                    defaultValue={p.value ?? ""}
+                    maxLength={255}
+                    style={{ width: "100%" }}
+                  />
+                </td>
+                <td>
+                  <input
+                    form={`perm-${String(p.id)}`}
+                    name="comment"
+                    defaultValue={p.comment ?? ""}
+                    maxLength={255}
+                    style={{ width: "100%" }}
+                  />
+                </td>
+                <td style={{ display: "flex", gap: "0.5rem" }}>
+                  <button
+                    type="submit"
+                    form={`perm-${String(p.id)}`}
+                    className="btn btn-primary"
+                  >
+                    Save
+                  </button>
+                  <form action={deletePermission}>
+                    <input type="hidden" name="id" value={String(p.id)} />
+                    <button type="submit" className="btn btn-danger">
+                      Delete
+                    </button>
+                  </form>
+                </td>
               </tr>
             ))}
           </tbody>