v1.7.1: 멤버 권한·추천 사이트·네비게이션 UI 개선

관리자는 VIP·멤버만 수정 가능하도록 서버·UI 권한을 정리하고 소유자 권한 이전 API와 확인 모달을 추가했다. 추천 사이트 파비콘 캐시·URL 접두사·카드 편집 UI를 보강하고 확인 얼럿을 AdminConfirmModal로 통일했다.

Co-authored-by: Cursor <cursoragent@cursor.com>

server/routes/admin/api/members/[id].put.js

@@ -1,7 +1,7 @@
 import { createError, getRouterParam, readBody } from 'h3'
 import { z } from 'zod'
 import { requireAdminSession } from '../../../../utils/admin-auth'
-import { getMemberForAdmin, isEmailTaken, isUsernameTaken, updateMemberByAdmin } from '../../../../repositories/member-repository'
+import { getMemberForAdmin, isEmailTaken, isUsernameTaken, updateMemberByAdmin, assertActorCanEditMemberProfile } from '../../../../repositories/member-repository'
 import { removeManagedAvatarAsset } from '../../../../utils/member-avatar'
 
 const memberInputSchema = z.object({
@@ -18,7 +18,7 @@ const memberInputSchema = z.object({
  * @returns {Promise<Object>} 수정된 회원
  */
 export default defineEventHandler(async (event) => {
-  requireAdminSession(event)
+  const session = requireAdminSession(event)
   const memberId = String(getRouterParam(event, 'id') || '')
   const parsedBody = memberInputSchema.safeParse(await readBody(event))
 
@@ -62,6 +62,7 @@ export default defineEventHandler(async (event) => {
   }
 
   const updated = await updateMemberByAdmin({
+    actorUserId: session.userId,
     memberId,
     username: body.username,
     email,