feat: Phases 4-7 — Full Feature Expansion (26 features)

Phase 4 — New Widget Types:
- Clock/Weather, System Stats, RSS/Feed, Calendar, Markdown,
  Metric/Counter, Link Group, Camera/Stream widgets
- Backend services with caching for each data source
- Full creation form with dynamic config fields per type

Phase 5 — Visual & Styling Enhancements:
- Glassmorphism card style (solid/glass/outline)
- Board-level themes with per-board hue/saturation
- Animated SVG status rings replacing static dots
- Card size options (compact/medium/large)
- Custom CSS injection (admin + per-board, sanitized)
- Wallpaper backgrounds with blur/overlay/parallax

Phase 6 — Functional Features:
- Favorites bar with drag-and-drop reordering
- Recent apps tracking with privacy toggle
- Uptime dashboard page (/status, guest-accessible)
- Notifications system (Discord/Slack/Telegram/HTTP webhooks)
- App tags with filtering in board view
- Multi-URL app cards with expandable sub-links
- Personal API tokens with scoped permissions
- Audit log with retention and admin viewer

Phase 7 — Quality of Life:
- Onboarding wizard (5-step first-launch setup)
- App URL health preview with favicon/title detection
- Board templates (4 built-in + custom import/export)
- Keyboard shortcut overlay (j/k nav, 1-9 boards, ? help)

212 files changed, 15641 insertions, 980 deletions.
Build, lint, type check, and 222 tests all pass.

plans/phase-2-enhanced-features/phase-1-oauth.md

@@ -5,6 +5,7 @@
 **Domain:** fullstack
 
 ## Objective
+
 Add OIDC/OAuth2 authentication via Authentik, including redirect/callback flows, auto-provisioning users, and admin configuration UI.
 
 ## Tasks
@@ -21,6 +22,7 @@ Add OIDC/OAuth2 authentication via Authentik, including redirect/callback flows,
 - [x] Task 10: Add env vars to `.env.example` — OAUTH_CLIENT_ID, OAUTH_CLIENT_SECRET, OAUTH_DISCOVERY_URL, OAUTH_REDIRECT_URI
 
 ## Files to Modify/Create
+
 - `src/lib/server/services/oauthService.ts` — NEW
 - `src/routes/auth/oauth/authorize/+server.ts` — NEW
 - `src/routes/auth/oauth/callback/+server.ts` — NEW
@@ -33,6 +35,7 @@ Add OIDC/OAuth2 authentication via Authentik, including redirect/callback flows,
 - `.env.example` — MODIFY
 
 ## Acceptance Criteria
+
 - OAuth login redirects to Authentik and returns with valid session
 - New OAuth users are auto-provisioned with correct role/groups
 - Existing users can link OAuth identity
@@ -41,6 +44,7 @@ Add OIDC/OAuth2 authentication via Authentik, including redirect/callback flows,
 - Login page shows appropriate buttons based on auth mode
 
 ## Notes
+
 - Use `openid-client` for OIDC discovery and token exchange
 - Store OAuth state/nonce in HTTP-only cookies for CSRF protection
 - Map Authentik groups to local groups by name