Web dashboard step 1: migration, sessions, users CLI, public site

Migration 0004 (users, sessions, config_changes, profile_versions, jobs,
rating_events.user_id, runs.report_json, issues.issue_json), the issue
snapshot writer and loader, the web module skeleton with layout and static
assets, axum-login/tower-sessions over a sqlx session store, password-auth
users with a CLI, the login throttle, the origin check, security headers,
and the public issue pages, archive, Atom feed and robots.txt.

Co-Authored-By: Claude Fable 5.1 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01NHyYupFdBiR4VfoUM7NjSM

Cargo.toml

@@ -7,7 +7,9 @@ edition = "2024"
 ammonia = "4.1.4"
 anyhow = "1.0.104"
 askama = "0.16.0"
+async-trait = "0.1.92"
 axum = "0.8.9"
+axum-login = { git = "https://github.com/maxcountryman/axum-login.git", rev = "151c72d7a1b4646830f86b4332e6bd6e34d719a7", version = "0.18.0" }
 base64 = "0.23.1"
 clap = { version = "4.6.6", features = ["derive"] }
 dom_smoothie = "0.18.0"
@@ -19,6 +21,7 @@ hmac = "0.13.0"
 image = "0.25.10"
 jiff = { version = "0.2.35", features = ["serde"] }
 libc = "0.2.189"
+password-auth = "1.0.0"
 rand = "0.10.2"
 reqwest = { version = "0.13.4", default-features = false, features = [
     "rustls",
@@ -30,6 +33,7 @@ reqwest = { version = "0.13.4", default-features = false, features = [
     "system-proxy",
 ] }
 resvg = "0.48.1"
+rpassword = "7.5.4"
 scraper = "0.27.0"
 serde = { version = "1.0.229", features = ["derive"] }
 serde_json = "1.0.151"
@@ -44,15 +48,21 @@ sqlx = { version = "0.9.0", default-features = false, features = [
     "tls-rustls-ring",
 ] }
 thiserror = "2.0.20"
+time = "0.3.55"
 tiny-skia = "0.12.0"
 tokio = { version = "1.53.1", features = ["full"] }
 tokio-util = { version = "0.7.19", features = ["io"] }
-tower-http = { version = "0.7.0", features = ["trace", "fs"] }
+toml = "1.1.4"
+toml_edit = "0.25"
+tower-http = { version = "0.7.0", features = ["trace", "fs", "request-id"] }
+tower_governor = { version = "0.8.0", features = ["axum"] }
 tracing = "0.1.44"
 tracing-subscriber = { version = "0.3.23", features = ["env-filter"] }
 url = { version = "2.5.8", features = ["serde"] }
 
 [dev-dependencies]
 figment = { version = "0.10.19", features = ["test", "toml", "env"] }
+roxmltree = "0.21.1"
 tempfile = "3.27.0"
+tower = { version = "0.5.3", features = ["util"] }
 zip = { version = "6", default-features = false, features = ["deflate"] }