Add remaining public + admin pages (parallel build, 26 files)

Built via two parallel agent workflows reading the real Prisma schema, then
integrated + verified.

Public: /shop (categories + storefront), /community hub, /rankings (top by
credits), /staff, /photos (camera_web gallery), /help (categories + rules),
/help/tickets (auth-gated user tickets + create), /settings (auth-gated, update
motto via RCON).

Admin: /admin/catalog (+[id] items), /admin/radio (shouts/apps/schedules +
delete shout), /admin/teams (CRUD), /admin/permissions (read), /admin/wordfilter
(CRUD + RCON push), /admin/ip (whitelist/blacklist CRUD), /admin/applications
(list + dismiss), /admin/logs (chat/command/alert read), /admin/achievements
(read). Server actions all staff-gated.

Header + admin nav extended. Verified: tsc exit 0, vitest 48/48, next build
exit 0 (33 routes); curl-probed every route — public 200/<main>, auth+admin
correctly 307-redirect when unauthorized.

src/app/photos/page.tsx

@@ -0,0 +1,69 @@
+import { prisma } from "@/lib/prisma";
+
+export const dynamic = "force-dynamic";
+
+type Photo = {
+  id: number;
+  userId: number;
+  roomId: number;
+  timestamp: number;
+  url: string;
+};
+
+function formatDate(timestamp: number): string {
+  return new Date(timestamp * 1000)
+    .toISOString()
+    .slice(0, 16)
+    .replace("T", " ");
+}
+
+export default async function PhotosPage() {
+  let photos: Photo[] = [];
+  try {
+    photos = await prisma.cameraWeb.findMany({
+      orderBy: { timestamp: "desc" },
+      take: 48,
+    });
+  } catch {
+    photos = [];
+  }
+
+  return (
+    <main>
+      <div className="hero">
+        <h1>Photos</h1>
+        <p className="muted" style={{ marginTop: 0 }}>
+          The latest snapshots taken in the hotel.
+        </p>
+      </div>
+
+      {photos.length === 0 ? (
+        <p className="muted">No photos yet.</p>
+      ) : (
+        <div className="grid cols-3">
+          {photos.map((p) => (
+            <article key={String(p.id)} className="card">
+              {/* eslint-disable-next-line @next/next/no-img-element */}
+              <img
+                src={p.url}
+                alt={`Photo by user #${p.userId}`}
+                style={{
+                  width: "100%",
+                  height: "auto",
+                  borderRadius: 4,
+                  display: "block",
+                }}
+              />
+              <p className="muted" style={{ margin: "0.5rem 0 0" }}>
+                {formatDate(p.timestamp)}
+              </p>
+              <p className="muted" style={{ margin: 0 }}>
+                by user #{p.userId}
+              </p>
+            </article>
+          ))}
+        </div>
+      )}
+    </main>
+  );
+}