Refactor admin panel: enhance user management and security features

- Added role-based access control for user management links in admin navigation.
- Improved user account display with a dedicated account link.
- Implemented form submission confirmation for delete actions in the admin interface.
- Introduced a password visibility toggle on the login page.
- Added login throttling to prevent brute-force attacks, recording failed attempts.
- Created a CLI script for creating an admin user, replacing the previous hardcoded admin credentials.
- Updated database schema to support login attempt tracking.
- Enhanced user editing functionality, allowing role changes with restrictions.
- Improved modal handling for user actions, ensuring better focus management.
- Added styles for new account management page and improved modal transitions.

admin/index.js

@@ -32,3 +32,13 @@ document.addEventListener('submit', async (e) => {
     btn.disabled = false;
   }
 });
+
+// Asks before submitting any form marked .js-confirm-submit (e.g. delete),
+// using the message in its data-confirm attribute.
+document.addEventListener('submit', (e) => {
+  const form = e.target;
+  if (!form.classList.contains('js-confirm-submit')) return;
+  if (!confirm(form.dataset.confirm || 'Are you sure?')) {
+    e.preventDefault();
+  }
+});