Feat: форматирование дат устройств (relative time + tooltip) ...

- Добавлена утилита webclient/src/utils/date.js:
  - formatRelative() — относительный формат ("5 min ago", "1 hour ago")
  - formatDateTime() — точная дата для tooltip ("Jun 8, 2026 14:30")
  - formatDate() — короткая дата ("Jun 8, 2026")
- DeviceTable.vue: колонка Last Contact с относительным форматом + tooltip
- DeviceDetailPage.vue: last_contact → relative, create_at → полный формат
- AreaDetailPage.vue: исправлен watch на route.params.id для обновления при навигации
- Добавлены тесты date.spec.js (17 тестов)

Даты теперь читаются как "1 hour ago", при наведении — точное время.

Refactor: extract shared logger utils, fix edge cases in Pinia/HTTP logging

P2: Vue Client — console logging (HTTP, router, Pinia actions, error handler)

Phase 4 cleanup & polish: param migration seeds, gnexus-ui-kit LoginPage styles, single .env ...

- Replace raw string interpolation in migration with $tb->prepare() + execute()

- Remove all var(--color-*) from LoginPage.vue in favor of gnexus-ui-kit utility classes

- Unify .env: single server/.env, remove server/SHServ/.env override, update config.php

- Update auth-fix-plan.md: mark Phase 4 tasks complete

Phase 3 infrastructure hardening: IP/UA binding, nginx getallheaders fallback, auth rate limiting, permission cache

Phase 2 session stability: refresh queue, Bearer fallback, proactive refresh

Phase 1 auth security hotfixes: cookie-based session, bearer checks, router guard sync ...

- Remove access_token from OAuth callback URL (token leak fix)
- Add sanitizeReturnTo() to prevent open redirect on login/callback
- Add Bearer token expiration check in resolve_user_by_bearer()
- Add user status check in load_user_by_id() (block inactive/banned)
- Cache authStore.init() promise to prevent race condition
- Await auth init in router beforeEach guard
- Remove URL token parsing from main.js and LoginPage
- Remove hasTokenInUrl workaround from client.js 401 handler

Fix OAuth callback: extract access_token in main.js before auth init, prevent 401 redirect loop in client.js

Fix OAuth callback: remove refreshToken() from init() to prevent 401 cascade that clears access_token

Add server/dist build to repository for zero-dependency prod deploy