feat: profile edit page (password change)

[DGINXREAL]

Summary

Adds a top-level /profile page where the logged-in user views their name & email (read-only) and changes their password. Wires up the previously dead Profile entry in the user menu.

• GET /profile (app.profile.edit) and PUT /profile (app.profile.update), auth-only, not project-scoped (no ProjectBindingMiddleware).
• ProfileController reads auth()->user(); update validates via ProfileUpdateRequest (current_password + password min:8 confirmed) and relies on the User model's hashed cast.
• Minimal sidebar-less ProfileLayout (logo + Back link to /); Profile/Edit.tsx mirrors the Admin/Users/Edit styling, shows read-only name/email, field errors, and a success banner.

Testing

• ddev php artisan test --filter=ProfileTest → 6 passed (27 assertions): guest redirect, authenticated render, happy-path change (Hash::check), wrong current password, mismatched confirmation, too-short password.
• ddev npm run build → clean (tsc + Vite, zero errors).

Notes / follow-ups (non-blocking)

• Password change does not invalidate the current session (AuthenticateSession isn't enabled app-wide — standard Laravel default, matches Admin/Users/Edit). Deliberate follow-up if "log out other sessions" is wanted.
• Password inputs use bare <label>/<input> (no htmlFor/id), matching the existing Admin/Users/Edit pattern — candidate for a repo-wide a11y pass.

🤖 Generated with Claude Code