feat(profile): a full identity system — name styles, decorations, effects, nameplates, tag, links, board

The owner asked for profile customisation that is "completo e FODA", pointing
at Discord's profile editor. This is the whole thing, end to end, with a live
preview.

What a user can now set, and where it shows:

  - Display name style: 10 fonts × 9 effects (solid, gradient, neon, toon,
    pop, gummy, prism, glitch, fire) × two colours. Popout and full profile.
  - Avatar decoration: 10 (ring, neon, flames, stars, halo, vines, pixel,
    hearts, frost, crown). Inline SVG — no image assets, scales to any size.
  - Profile effect over the banner: 9 (sparkles, rain, snow, matrix,
    confetti, aurora, embers, bubbles, hearts). CSS particles with seeded
    positions so re-renders do not change the weather.
  - Nameplate behind the member-list row: 10 presets + custom two-colour.
  - Theme: two colours washed behind the card, and the banner fallback.
  - Pronouns, and a clan-style tag (emoji + 2–4 letters) beside the name,
    also on the member row.
  - Links, up to 5, with the brand icon picked from the host.
  - Board: favourite game, up to 5 in rotation, up to 10 wanted, a quote.
    Games come from Steam search through a small server proxy (cached,
    10 min) or are typed by hand; covers only load from Steam's CDN.
  - Badges, derived rather than stored: instance admin, server owner,
    founder (joined in the space's first month), veteran (a year), OG (six
    months), stylist. Nothing to grant, revoke or migrate.

Storage is one JSON column, users.profile_style (migration 0019), and one
normaliser in shared/profile.ts that both the server (on write and on read)
and the client (on render) run. It never throws: unknown ids fall back,
strings are cut to their limits, colours must be #rrggbb, link URLs must be
https, cover URLs must be a Steam CDN host. Kept out of the federation
durable-field set on purpose — peers on older builds do not know the field,
and it is cosmetic.

The editor is a new Settings > Profile tab. Its preview is the same
ProfileCard component the popout renders, with the draft style swapped in —
what you see while editing is, by construction, what others see.

Fonts are OFL builds self-hosted from public/fonts alongside DM Sans, latin
subsets only, ~120 KB in total.

Verified: web build, 517 web tests (11 new: normaliser bounds and fallbacks,
link icon detection, badge derivation), server typecheck, 804 server tests.

Co-Authored-By: Claude Fable 5.1 <noreply@anthropic.com>

docs/roadmap-resenha.md

@@ -65,10 +65,27 @@ Ordem sugerida: as pequenas primeiro, as grandes uma de cada vez.
 | # | Feature | Tamanho | Observação técnica |
 |---|---|---|---|
 
-## Próximo foco (pedido em 2026-09-02): personalização do usuário e do perfil
+## Identidade do perfil (entregue 2026-09-02, pedido: "completo e FODA")
 
-A definir com o dono. Já existe: avatar, banner (imagem ou GIF), cor do avatar
-e do banner, sobre mim, status personalizado, atividade (Spotify/jogos).
+Uma coluna JSON (`users.profile_style`, migração 0019) normalizada no servidor
+por `shared/profile.ts`. Aba **Perfil** nas configurações com prévia ao vivo
+(`ProfilePanel` renderiza o mesmo `ProfileCard` que o popout).
+
+| Peça | Onde aparece | Detalhe |
+|---|---|---|
+| Estilo do nome — 10 fontes × 9 efeitos × 2 cores | popout, perfil completo | Fontes OFL em `public/fonts`; efeitos são CSS (`.name-fx-*`) |
+| Decoração do avatar — 10 | popout, perfil, editor | SVG inline em `DecoratedAvatar`, sem imagens |
+| Efeito do perfil — 9 | banner do popout e do perfil | Partículas CSS com posições semeadas (`ProfileEffectLayer`) |
+| Nameplate — 10 + personalizado | lista de membros | `.nameplate-*` |
+| Tema (2 cores) | fundo do cartão e banner sem imagem | |
+| Pronomes, tag (emoji + 2–4 letras) | ao lado do nome; tag também na lista de membros | |
+| Links (até 5) | popout e aba Sobre | Ícone detectado pelo host; só https |
+| Quadro: jogo favorito, rotação (5), quero jogar (10), citação | aba Quadro do perfil; tira "Coleção" no popout | Busca na Steam via `/api/games/search` (proxy, cache 10 min); capas só de CDN da Steam |
+| Emblemas derivados | popout e perfil | admin, dono, fundador (1º mês), veterano (1 ano), OG (6 meses), estiloso — nada é armazenado |
+
+Fora do escopo desta entrega, candidatos a seguir: perfil por servidor
+(apelido/avatar por servidor), emblemas concedidos pelo admin, molduras
+animadas por upload, status com expiração.
 
 ## Pendente — ideias aprovadas