Profile Management

User-facing settings page: name, email, avatar, password rotation, 2FA enrolment/disable, notification preferences, session list with revoke. Built with the same form components as the rest of the admin so the UX stays consistent. Profile updates emit audit-log events for compromise forensics.