Make Cobble a local install: setup flow, bots-first admin, settings

Local, password-only auth:
- No public pages; everything outside /admin and /auth redirects in
- First run (no users) sends every page to /auth/signup, which creates
  the super admin (user #1) once and then locks
- Login is email/username + password; removed the emailed-code flow,
  /auth/sso and email password reset
- Google login kept for existing accounts only, never creates them
- seed-super-admin now requires SEED_SUPER_ADMIN_PASSWORD

Bots-first admin:
- /admin and closed sections (people, logs, backups) redirect to
  /admin/bots; only bots and settings are live (AdminSections)
- Removed the old admin layout; every /admin page uses the bots rail
- Coordinator bot created at signup/seed and by /admin/bots
  (ensureCoordinatorBot), which redirects to its chat
- bots.system_prompt (markdown) with a default coordinator prompt
- seed-bots reuses the existing coordinator

Settings:
- Sub pages general (default), profile, change-password, listed in the
  rail with a back link; unknown settings paths redirect to general
- Redesigned settings UI: pane header, grouped rows, sticky save bar
- General: System/Light/Dark theme, saved per device

Co-Authored-By: Claude Opus 5.5 <[email protected]>

src/pages/admin/bots/(sections)/empty-crew.tsx

@@ -1,18 +0,0 @@
-import Center from "@moduletrace/twui/layout/Center";
-import Stack from "@moduletrace/twui/layout/Stack";
-import Span from "@moduletrace/twui/layout/Span";
-import BotStone from "@/src/components/general/bot-stone";
-
-export default function EmptyCrew() {
-    return (
-        <Center className="grow h-full">
-            <Stack className="items-center gap-3!">
-                <BotStone face="asleep" size={64} />
-                <Span className="text-sm font-bold text-ink">No bots yet</Span>
-                <Span className="text-sm text-ink-secondary">
-                    Add a bot and give it a job.
-                </Span>
-            </Stack>
-        </Center>
-    );
-}

src/pages/admin/bots/index.server.ts

@@ -1,11 +1,11 @@
 import userAuth from "@/src/functions/backend/auth/user-auth";
-import grabBots from "@/src/functions/backend/db/bots/grab-bots";
+import ensureCoordinatorBot from "@/src/functions/backend/db/bots/ensure-coordinator-bot";
 import type { PagePropsType } from "@/src/types";
 import type { BunextPageServerFn } from "@moduletrace/bunext/types";
 
 /**
- * Opens the coordinator's conversation. With no crew yet, renders the empty
- * shell.
+ * Opens the coordinator's conversation, creating the coordinator first if
+ * this workspace doesn't have one yet.
  */
 export const server: BunextPageServerFn<PagePropsType> = async ({ req }) => {
     const { user } = await userAuth({ req });
@@ -18,20 +18,11 @@ export const server: BunextPageServerFn<PagePropsType> = async ({ req }) => {
         };
     }
 
-    const bots = await grabBots({ user_id: user.id });
-    const first_bot = bots[0];
-
-    if (first_bot?.id) {
-        return {
-            redirect: {
-                destination: `/admin/bots/${first_bot.id}`,
-            },
-        };
-    }
+    const coordinator_id = await ensureCoordinatorBot({ user_id: user.id });
 
     return {
-        props: {
-            bots,
+        redirect: {
+            destination: `/admin/bots/${coordinator_id}`,
         },
     };
 };

src/pages/admin/bots/index.tsx

@@ -1,9 +1,11 @@
 import type { BunextPageModuleMeta } from "@moduletrace/bunext/types";
 import { SiteData } from "@/src/data/site-data";
-import EmptyCrew from "./(sections)/empty-crew";
 
+/**
+ * Never rendered: `index.server.ts` always redirects to the coordinator.
+ */
 export default function BotsPage() {
-    return <EmptyCrew />;
+    return null;
 }
 
 export const meta: BunextPageModuleMeta = {