perf: optimize CMS queries, caching, and asset delivery

Database:
- Add missing indexes (users.credits, users_currency(type,amount),
  users_settings.respects_received, camera_web.timestamp,
  messenger_offline.user_id) via migrations 0020/0021
- Use partial .select() everywhere instead of SELECT * (tickets, users,
  rooms, audit logs, catalog tree, polls, radio, password reset)
- Add queryPrepared/queryPreparedOne (server-side prepared statements)
  and switch the login check to a prepared statement; drop dead
  cache options from the pool config
- Raise total_users/total_rooms COUNT(*) cache TTL to 5m

Caching:
- Consolidate the three cache helpers (cached, redisCache, cachedQuery)
  into a single memory-first implementation backed by Redis
- invalidateKey now clears the in-process cache as well as Redis
- Cache homepage sections, news list, and leaderboard tabs; share one
  news_list cache key between homepage and news archive
- siteSettings: in-process cache with TTL so repeated getters no longer
  pay a Redis round-trip per call
- Share a 10s poll cache across all radio SSE connections
- Normalize timestamps after cache reads (Redis JSON round-trip)

Assets:
- Enable AVIF/WebP via images.formats and remove unoptimized from news
  covers and the homepage hero (149KB jpg) with proper sizes/priority
- Support ?format=webp|avif|png in the /imaging proxy via sharp

Other:
- Fix pnpm supply-chain minimumReleaseAge failures by excluding the
  freshly-published packages (next 16.3.1, hookform resolvers 5.8.0,
  resend 6.20.0)
- Remove unused before/after fields from housekeeping AuditEntry

src/app/(site)/leaderboard/page.tsx

@@ -1,4 +1,4 @@
-import { desc, eq, inArray } from "drizzle-orm";
+import { desc, eq } from "drizzle-orm";
 import Link from "next/link";
 import { getTranslations } from "next-intl/server";
 import { ContentCard, EmptyState, RankBadge } from "@/components/public/ui";
@@ -7,6 +7,7 @@ import {
 	type CurrencyKind,
 } from "@/components/shared/currency-icon";
 import { UserAvatarThumbnail } from "@/components/shared/user-avatar-thumbnail";
+import { cached } from "@/lib/cache";
 import { db, User, UsersCurrency, UsersSettings } from "@/lib/db";
 
 export const metadata = { title: "Leaderboard" };
@@ -43,15 +44,17 @@ type Row = { username: string; look: string; value: number };
 
 async function loadCreditsRows(): Promise<Row[]> {
 	try {
-		const users = await db
-			.select({
-				username: User.username,
-				look: User.look,
-				credits: User.credits,
-			})
-			.from(User)
-			.orderBy(desc(User.credits))
-			.limit(20);
+		const users = await cached("lb_credits", 60_000, () =>
+			db
+				.select({
+					username: User.username,
+					look: User.look,
+					credits: User.credits,
+				})
+				.from(User)
+				.orderBy(desc(User.credits))
+				.limit(20),
+		);
 		return users.map((u) => ({
 			username: u.username,
 			look: u.look,
@@ -64,35 +67,19 @@ async function loadCreditsRows(): Promise<Row[]> {
 
 async function loadCurrencyRows(type: number): Promise<Row[]> {
 	try {
-		const top = await db
-			.select({
-				userId: UsersCurrency.userId,
-				amount: UsersCurrency.amount,
-			})
-			.from(UsersCurrency)
-			.where(eq(UsersCurrency.type, type))
-			.orderBy(desc(UsersCurrency.amount))
-			.limit(20);
-		if (top.length === 0) return [];
-
-		const users = await db
-			.select({ id: User.id, username: User.username, look: User.look })
-			.from(User)
-			.where(
-				inArray(
-					User.id,
-					top.map((t) => t.userId),
-				),
-			);
-		const byId = new Map(users.map((u) => [u.id, u]));
-
-		return top
-			.map((t) => {
-				const u = byId.get(t.userId);
-				if (!u) return null;
-				return { username: u.username, look: u.look, value: t.amount };
-			})
-			.filter((r): r is Row => r !== null);
+		return await cached(`lb_currency_${type}`, 60_000, () =>
+			db
+				.select({
+					username: User.username,
+					look: User.look,
+					value: UsersCurrency.amount,
+				})
+				.from(UsersCurrency)
+				.innerJoin(User, eq(UsersCurrency.userId, User.id))
+				.where(eq(UsersCurrency.type, type))
+				.orderBy(desc(UsersCurrency.amount))
+				.limit(20),
+		);
 	} catch {
 		return [];
 	}
@@ -103,38 +90,18 @@ async function loadSettingsRows(
 ): Promise<Row[]> {
 	try {
 		const column = UsersSettings[field];
-		const top = await db
-			.select({
-				userId: UsersSettings.userId,
-				value: column,
-			})
-			.from(UsersSettings)
-			.orderBy(desc(column))
-			.limit(20);
-		if (top.length === 0) return [];
-
-		const users = await db
-			.select({ id: User.id, username: User.username, look: User.look })
-			.from(User)
-			.where(
-				inArray(
-					User.id,
-					top.map((t) => t.userId),
-				),
-			);
-		const byId = new Map(users.map((u) => [u.id, u]));
-
-		return top
-			.map((t) => {
-				const u = byId.get(t.userId);
-				if (!u) return null;
-				return {
-					username: u.username,
-					look: u.look,
-					value: Number(t.value ?? 0),
-				};
-			})
-			.filter((r): r is Row => r !== null);
+		return await cached(`lb_settings_${field}`, 60_000, () =>
+			db
+				.select({
+					username: User.username,
+					look: User.look,
+					value: column,
+				})
+				.from(UsersSettings)
+				.innerJoin(User, eq(UsersSettings.userId, User.id))
+				.orderBy(desc(column))
+				.limit(20),
+		);
 	} catch {
 		return [];
 	}