Hub: accounts, IMVU linking by tagline, proxy sign-in, presence, console

People sign up on the website and link IMVU accounts by putting a code in the account's tagline, which the
hub reads from IMVU's public API (the most recent proof wins; link caps per person). IMVU's age verification
or Access Pass make an account adult. T5DE's proxy signs in with a device code and keeps a WebSocket open,
reporting the IMVU account in use and the community products it wears; /online shows those who opted in.
Moderators get a console: who's online, people, link caps, bans, roles, and the audit log. Tests run the
website and API against an embedded Postgres and a fake IMVU API.

Co-Authored-By: Claude Opus 5.5 <[email protected]>

internal/web/templates/signup.html

@@ -0,0 +1,22 @@
+{{define "title"}}Create account{{end}}
+{{define "content"}}
+<div class="panel narrow">
+  <h1>Create account</h1>
+  <p class="muted">One T5DE account for all your IMVU accounts.</p>
+  {{if .Error}}<div class="error">{{.Error}}</div>{{end}}
+  <form method="post" action="/signup">
+    <label for="username">Username</label>
+    <input type="text" id="username" name="username" value="{{.Username}}" autocomplete="username" required autofocus
+      pattern="[A-Za-z0-9_]{3,32}" title="3 to 32 letters, digits or underscores">
+    <label for="password">Password</label>
+    <input type="password" id="password" name="password" autocomplete="new-password" required minlength="10">
+    <label for="password2">Password again</label>
+    <input type="password" id="password2" name="password2" autocomplete="new-password" required minlength="10">
+    <p class="muted small">Not your IMVU password: use a new one.</p>
+    <div class="actions">
+      <button>Create account</button>
+      <span class="muted small">Have one? <a href="/signin">Sign in</a></span>
+    </div>
+  </form>
+</div>
+{{end}}