Add SvelteKit frontend with Tailwind CSS (Phase 4)

Build a modern, calm web UI using SvelteKit 5 + Tailwind CSS v4.

Pages:
- Setup wizard (first-run admin account creation)
- Login with JWT token management and auto-refresh
- Dashboard with stats cards and recent events timeline
- Servers: add/delete Immich server connections with validation
- Trackers: create album trackers with album picker, event type
  selection, target assignment, and scan interval config
- Templates: Jinja2 message template editor with live preview
- Targets: Telegram and webhook notification targets with test
- Users: admin-only user management (create/delete)

Architecture:
- Reactive auth state with Svelte 5 runes
- API client with JWT auth, auto-refresh on 401
- Static adapter builds to 153KB for embedding in FastAPI
- Vite proxy config for dev server -> backend API
- Sidebar layout with navigation and user info

Also adds Rule 2 to primary plan: perform detailed code review
after completing each phase.

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

frontend/src/routes/users/+page.svelte

@@ -0,0 +1,85 @@
+<script lang="ts">
+	import { onMount } from 'svelte';
+	import { api } from '$lib/api';
+	import { getAuth } from '$lib/auth.svelte';
+	import PageHeader from '$lib/components/PageHeader.svelte';
+	import Card from '$lib/components/Card.svelte';
+
+	const auth = getAuth();
+	let users = $state<any[]>([]);
+	let showForm = $state(false);
+	let form = $state({ username: '', password: '', role: 'user' });
+	let error = $state('');
+
+	onMount(load);
+
+	async function load() {
+		try { users = await api('/users'); } catch { /* ignore */ }
+	}
+
+	async function create(e: SubmitEvent) {
+		e.preventDefault();
+		error = '';
+		try {
+			await api('/users', { method: 'POST', body: JSON.stringify(form) });
+			form = { username: '', password: '', role: 'user' };
+			showForm = false;
+			await load();
+		} catch (err: any) { error = err.message; }
+	}
+
+	async function remove(id: number) {
+		if (!confirm('Delete this user?')) return;
+		try {
+			await api(`/users/${id}`, { method: 'DELETE' });
+			await load();
+		} catch (err: any) { alert(err.message); }
+	}
+</script>
+
+<PageHeader title="Users" description="Manage user accounts (admin only)">
+	<button onclick={() => showForm = !showForm}
+		class="px-3 py-1.5 bg-[var(--color-primary)] text-[var(--color-primary-foreground)] rounded-md text-sm font-medium hover:opacity-90">
+		{showForm ? 'Cancel' : 'Add User'}
+	</button>
+</PageHeader>
+
+{#if showForm}
+	<Card class="mb-6">
+		{#if error}<div class="bg-red-50 text-red-700 text-sm rounded-md p-3 mb-4">{error}</div>{/if}
+		<form onsubmit={create} class="space-y-3">
+			<div>
+				<label class="block text-sm font-medium mb-1">Username</label>
+				<input bind:value={form.username} required class="w-full px-3 py-2 border border-[var(--color-border)] rounded-md text-sm bg-[var(--color-background)]" />
+			</div>
+			<div>
+				<label class="block text-sm font-medium mb-1">Password</label>
+				<input bind:value={form.password} required type="password" class="w-full px-3 py-2 border border-[var(--color-border)] rounded-md text-sm bg-[var(--color-background)]" />
+			</div>
+			<div>
+				<label class="block text-sm font-medium mb-1">Role</label>
+				<select bind:value={form.role} class="w-full px-3 py-2 border border-[var(--color-border)] rounded-md text-sm bg-[var(--color-background)]">
+					<option value="user">User</option>
+					<option value="admin">Admin</option>
+				</select>
+			</div>
+			<button type="submit" class="px-4 py-2 bg-[var(--color-primary)] text-[var(--color-primary-foreground)] rounded-md text-sm font-medium hover:opacity-90">Create User</button>
+		</form>
+	</Card>
+{/if}
+
+<div class="space-y-3">
+	{#each users as user}
+		<Card>
+			<div class="flex items-center justify-between">
+				<div>
+					<p class="font-medium">{user.username}</p>
+					<p class="text-sm text-[var(--color-muted-foreground)]">{user.role} · joined {new Date(user.created_at).toLocaleDateString()}</p>
+				</div>
+				{#if user.id !== auth.user?.id}
+					<button onclick={() => remove(user.id)} class="text-xs text-[var(--color-destructive)] hover:underline">Delete</button>
+				{/if}
+			</div>
+		</Card>
+	{/each}
+</div>