Tags: Azmekk/Den

Fix drag-drop uploads posting instantly and hide bucket video URLs

Drag-dropping images/videos now adds them to the compose bar preview
instead of immediately sending. Video URLs from the bucket are hidden
in message content (like images), while third-party video URLs still
display as clickable links.

Fix grouped messages showing full date instead of time-only

Fix desktop app not hearing voice participants by bypassing Web Audio…

… graph

Remember last open channel/DM when switching sidebar tabs

Fix DM notifications triggering for own messages

Re-fetch all data on WebSocket reconnect and tab wake

Invalidate message/DM caches and refresh all stores (channels, users,
config, emotes, unread, DMs) when the WebSocket reconnects or after
the tab has been hidden for 60+ seconds.

Fix late joiner signaling collision and leave state cleanup

Pre-add existing tracks without renegotiation so they are included in
the initial SDP answer, avoiding a race where the server sends offers
before the client is ready. Also send voice_leave for pendingChannelId
so disconnecting while connecting properly clears voice state.

Fix one-way audio by subscribing late joiners to existing tracks

Replace static forwarder with dynamic activeForwarder that supports
adding subscribers while running. AddParticipant now subscribes new
users to all existing published tracks in the room.

Fix cross-network voice by adding PUBLIC_IP NAT traversal and compreh…

…ensive logging

Add unified settings page with improved 2FA, change password, and QR …

…codes

- Create /settings route with vertical tab navigation for mobile-friendly settings
- Move 2FA, export, and admin panels into dedicated settings sub-pages
- Add QR code generation for 2FA setup using qrcode library
- Add copy buttons for 2FA secret and recovery codes
- Add change password endpoint (PUT /api/auth/change-password)
- Make settings cog visible to all users, not just admins
- Keep pencil icon popover for display name and color editing only
- Merge admin panel into settings page as admin-only section