docs: plan for profile page with self-service password change

Adds /profile reachable via header username, with change-password form
as its first section. Industry-standard session semantics: other sessions
invalidated on password change, current session kept, via new
users.password_changed_at column + session marker.

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
This commit is contained in:
mwiegand 2026-05-11 21:41:25 +02:00
parent e1149704c8
commit 6eb9bd0ab3
No known key found for this signature in database

File diff suppressed because it is too large Load diff