feat: jwt cache, redis health, help-ticket admin, and write rate limits

Cut Auth.js DB load with cached jwtVersion checks, surface Redis in /api/health and deploy warnings, add admin help-center ticket reply UI, rate-limit API tickets/reactions/referral claims, and revoke PATs on sign-out-everywhere.

Co-authored-by: Cursor <[email protected]>

src/lib/admin-nav.ts

@@ -97,13 +97,18 @@ export const ADMIN_HUBS: AdminHubDefinition[] = [
 		titleKey: "tickets",
 		subtitleKey: "ticketsSubtitle",
 		icon: Ticket,
-		prefixes: ["/admin/tickets"],
+		prefixes: ["/admin/tickets", "/admin/help-tickets"],
 		tabs: [
 			{
 				href: "/admin/tickets",
 				labelKey: "tickets",
 				match: ["/admin/tickets"],
 			},
+			{
+				href: "/admin/help-tickets",
+				labelKey: "helpTickets",
+				match: ["/admin/help-tickets"],
+			},
 			{ href: "/admin/tickets/templates", labelKey: "templates" },
 		],
 	},
@@ -285,7 +290,7 @@ export const ADMIN_NAV_GROUPS: AdminNavGroup[] = [
 				href: "/admin/tickets",
 				labelKey: "tickets",
 				icon: Ticket,
-				matchPrefixes: ["/admin/tickets"],
+				matchPrefixes: ["/admin/tickets", "/admin/help-tickets"],
 			},
 		],
 	},