Add user profiles with node adoption via /v1/adoptions endpoint

Move adopt/release from profile routes to dedicated /v1/adoptions endpoint.
Node API now returns adopted_by field. Profile page shows read-only adopted
nodes. Node detail page has adopt/release buttons (operator adopts, admin
can release any). Admin release bypasses ownership check.

.env.example

@@ -336,6 +336,11 @@ WEB_PORT=8080
 # Default: 30
 # WEB_AUTO_REFRESH_SECONDS=30
 
+# Enable debug mode in the web dashboard
+# Shows extra diagnostic info (e.g., raw user IDs in the user menu)
+# Default: false
+# WEB_DEBUG=false
+
 # -------------------
 # OIDC Authentication
 # -------------------
@@ -374,13 +379,17 @@ WEB_PORT=8080
 # Default: roles
 # OIDC_ROLES_CLAIM=roles
 
-# Role value that grants admin access
+# IdP role name that grants admin access
 # Default: admin
-# OIDC_ADMIN_ROLE=admin
+# OIDC_ROLE_ADMIN=admin
 
-# Role value that grants member access
+# IdP role name for operator access (future use)
+# Default: operator
+# OIDC_ROLE_OPERATOR=operator
+
+# IdP role name for member access
 # Default: member
-# OIDC_MEMBER_ROLE=member
+# OIDC_ROLE_MEMBER=member
 
 # Secret for signing session cookies (required when OIDC_ENABLED=true)
 # Generate with: openssl rand -hex 32