Web dashboard step 1: migration, sessions, users CLI, public site

Migration 0004 (users, sessions, config_changes, profile_versions, jobs,
rating_events.user_id, runs.report_json, issues.issue_json), the issue
snapshot writer and loader, the web module skeleton with layout and static
assets, axum-login/tower-sessions over a sqlx session store, password-auth
users with a CLI, the login throttle, the origin check, security headers,
and the public issue pages, archive, Atom feed and robots.txt.

Co-Authored-By: Claude Fable 5.1 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01NHyYupFdBiR4VfoUM7NjSM

config.example.toml

@@ -210,6 +210,11 @@ settings = "/etc/daily-epub/xtc-settings.json"
 [server]
 bind = "127.0.0.1:3499"
 public_url = "https://daily.hallada.net"
+session_days = 30
+login_attempts = 10
+login_window_minutes = 15
+jobs_enabled = true
+journal_lines = 300
 # hmac_secret via DAILY_EPUB_SERVER__HMAC_SECRET env (32+ random bytes)
 # Optional Basic auth for the XTC OPDS feed and file downloads:
 # basic_auth_user = "daily"