feat: SSR 个人闭环（profile / user / favorites）

登录用户可改资料与头像、浏览收藏；公开主页不含邮箱；改密吊销并重建本端 session。

Co-authored-by: Cursor <cursoragent@cursor.com>

routers/setup.go

@@ -96,7 +96,7 @@ func Setup(cfg *config.Config) (*gin.Engine, error) {
 
 	webpages.Register(r, webpages.Deps{
 		DataDir: cfg.DataDir, JWTSecret: cfg.JWTSecret,
-		Settings: settingsSvc, Auth: authSvc,
+		Settings: settingsSvc, Auth: authSvc, User: userSvc,
 		Board: boardSvc, Post: postSvc, Comment: commentSvc,
 		Message: messageSvc, Filter: filter,
 		Limiter: limiter, EmailCode: emailCodeSvc, Store: uploadStore,