TerraManager v1.14.1 - Shared Care correctness, permissions and account preferences

TerraManager v1.14.1 focuses on Shared Care correctness, administration and
account-scoped behavior. It also contains the administration/audit work that
was developed after v1.13.0 but was not published as a separate v1.14.0 GitHub
release.

Administration and audit

• Adds an administrator-only Manage accounts screen for username/role
  changes, optional password reset, activation/deactivation and confirmed account
  removal.
• Revokes affected sessions after account changes and protects the final active
  administrator from removal, deactivation or demotion.
• Adds durable server-owned audit metadata for authenticated collection and
  account changes, with stable actor identity and 365-day retention.
• Collection/account mutations and their audit records commit together so an
  audit-write failure cannot silently leave an unaudited successful change.
• Adds an administrator-only Audit viewer with date, actor and action filters
  plus bounded pagination.
• Allows an administrator to initialize a genuinely empty Shared Care
  collection from a portable backup without downloading a meaningless empty
  safety copy; populated collections keep the existing safety-token protection.

Correctness and permissions

• Preserves care-event timestamps with explicit UTC offsets and handles legacy
  IANA time zones, DST-sensitive values and date-only birth dates correctly.
• Restricts permanent Shared Care collection/picture deletion to administrators
  while caregivers retain normal create, edit and archive workflows.
• Makes Box and Animal duplication resistant to repeated submission and keeps
  dialogs open until success is confirmed.
• Routes Shared Care detail/scanner/dialog Back behavior through browser history
  without duplicate pops.

Personal account preferences

Appearance, language, sorting and other personal Shared Care display preferences
now belong to the signed-in account. They follow that account across browsers or
devices and remain isolated when users switch accounts. Portable collection
backups deliberately exclude these personal server-account preferences.

QR Feeding Mode also shows current Animal thumbnails in both standalone and
Shared Care.

Privacy: audit events do not copy notes, pictures, passwords or session
tokens. Standalone Database Schema Version 16 and Portable Backup Format Version
2 remain unchanged.