chore: baseline snapshot before moderation-strictness feature

Repo .git was damaged (refs/ missing, index truncated, object store near-empty).
Repaired via git init (rebuilt refs), stale index preserved as .git/index.corrupt-20260910.bak,
then full worktree committed as a rollback baseline.

templates/auth/login.html

@@ -0,0 +1,29 @@
+{{template "base/header" .}}
+<form method="post" id="form">
+  <fieldset class="uk-fieldset">
+    {{ .CSRFTokenHTML }}
+    <legend class="uk-legend">{{t .LangCode "auth.login.title"}}</legend>
+    {{template "base/alert" .}}
+    <div class="uk-margin">
+      <label class="uk-form-label" for="email">{{t .LangCode "auth.login.email"}}</label>
+      <input name="email" id="email" class="uk-input" type="text" value="{{.email}}">
+    </div>
+    <div class="uk-margin">
+      <label class="uk-form-label" for="password">{{t .LangCode "auth.login.password"}}</label>
+      <input type="password" name="password" id="password" class="uk-input">
+    </div>
+    <div class="uk-margin">
+      {{ if eq .CaptchaType "math" }}
+      <input type="hidden" name="g-recaptcha-response" id="g-recaptcha-response" value="">
+      <button type="button" class="uk-button uk-button-primary math-captcha-trigger">{{t .LangCode "auth.login.submit"}}</button>
+      {{ else }}
+      <button type="submit" class="uk-button uk-button-primary g-recaptcha" data-sitekey="{{.RecaptchaSiteKey}}"
+              data-callback="onSubmit">{{t .LangCode "auth.login.submit"}}
+      </button>
+      {{ end }}
+      <a href="/forgot-password" class="uk-button uk-button-default">{{t .LangCode "auth.login.forgot"}}
+      </a>
+    </div>
+  </fieldset>
+</form>
+{{template "base/footer" .}}