v4.6.0

What's Changed

• [FINAL REVIEW] Complete security review — CSRF, prepared statements, transactions, merge with main by @marpisco with @Copilot in #149
• fix(admin): navbar theme not applied on page load — defer to DOMContentLoaded by @marpisco in #158
• Add toggles for OAuth/email OTP, improve login flow checks and robust OTP handling by @marpisco in #165
• Fix pending email OTP onboarding safeguards by @marpisco in #166
• chore(docs): do document update as of 02-07-2026, which are final and… by @marpisco in #168
• Adicionar token CSRF a ações em massa em admin/pedidos.php by @marpisco in #170
• Fix admin log table wrapping by @marpisco in #171
• Add ClassLink favicon to login pages by @marpisco in #175
• Add toggle to show/hide bulk reservation UI by @marpisco in #174
• fix(reservas): improve stat card theme colors by @marpisco in #176
• fix(reservas): unify filter button states by @marpisco in #177
• fix(reservas): align table header with theme by @marpisco in #178
• fix(reservas): improve action button hover styling by @marpisco in #179
• fix(reservas): make horario badge theme-aware by @marpisco in #192
• fix(reservar): make availability cells clickable by @marpisco in #180
• fix(admin): add logo to admin navbar by @marpisco in #181
• fix(admin): improve pedidos stat card theme colors by @marpisco in #182
• fix(reservas): apply ClassLink colors to page title by @marpisco in #194
• fix(admin): align pedidos title styling by @marpisco in #195
• feat(admin): load pedidos asynchronously by @marpisco in #190
• fix(admin): align email sender checkbox by @marpisco in #186
• fix(admin): update bulk reservation page copy by @marpisco in #187
• fix(admin): align config email security fields by @marpisco in #183
• fix(admin): simplify reports page text by @marpisco in #184
• fix(admin): simplify email notification copy by @marpisco in #185
• fix(admin): align TOTP config toggle by @marpisco in #189
• feat(reservar): load weekly statuses asynchronously by @marpisco in #191

Full Changelog: v4.5.0...v4.6.0