Dashboard account section, profile API, and CSS account panels

- SSO session auth gating on all protected pages
- dashboard.php: account section (profile form + workspace panel),
  onboarding prompt modal, overview bar extracted to CSS classes,
  dashboard.css linked in page head
- api/profile.php: save/dismiss endpoint for optional profile fields
- assets/css/dashboard.css: account grid, dash-account-panel,
  dash-profile-form, profile-prompt-backdrop modal, overview bar
  classes, dash-section-kicker, dash-tier-badge base styles
- includes/bootstrap.php: dbnToolsMainUserProfile,
  dbnToolsProfileNeedsPrompt, dbnToolsRequirePageAuth
- scripts/sql/004_user_profile_fields.sql: nullable phone, address,
  and profile_prompt_dismissed_at columns

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

api/logout.php

@@ -15,5 +15,6 @@ if (ini_get('session.use_cookies')) {
     ]);
 }
 session_destroy();
-header('Location: /');
+$return = 'https://tools.dobetternorge.no/';
+header('Location: https://dobetternorge.no/logout.php?redirect=' . urlencode($return));
 exit;

api/profile.php

@@ -0,0 +1,88 @@
+<?php
+declare(strict_types=1);
+
+require_once __DIR__ . '/../includes/bootstrap.php';
+
+dbnToolsRequireMethod('POST');
+dbnToolsRequireAuth();
+
+if (!dbnToolsIsFreeTier()) {
+    dbnToolsError('Main Do Better Norge account profile is available for SSO users.', 403, 'sso_required');
+}
+
+$userId = (int)($_SESSION['dbn_tools_sso_uid'] ?? 0);
+if ($userId <= 0) {
+    dbnToolsError('Session user is missing.', 401, 'session_required');
+}
+
+$input = dbnToolsJsonInput(20000);
+$currentProfile = dbnToolsMainUserProfile($userId) ?: [];
+
+function profileString(array $input, string $key, int $maxChars, array $currentProfile): string
+{
+    $raw = array_key_exists($key, $input) ? $input[$key] : ($currentProfile[$key] ?? '');
+    $value = trim((string)$raw);
+    if (mb_strlen($value, 'UTF-8') > $maxChars) {
+        dbnToolsError("Field {$key} is too long.", 422, 'field_too_long');
+    }
+    return $value;
+}
+
+$displayName = profileString($input, 'display_name', 100, $currentProfile);
+$phone = profileString($input, 'phone', 40, $currentProfile);
+$addressLine1 = profileString($input, 'address_line1', 180, $currentProfile);
+$addressLine2 = profileString($input, 'address_line2', 180, $currentProfile);
+$postalCode = profileString($input, 'postal_code', 32, $currentProfile);
+$city = profileString($input, 'city', 100, $currentProfile);
+$addressRegion = profileString($input, 'address_region', 100, $currentProfile);
+$country = strtoupper(profileString($input, 'country', 2, $currentProfile));
+$preferredLanguage = dbnToolsNormalizeUiLanguage($input['preferred_language'] ?? ($_SESSION['lang'] ?? 'en'));
+$dismissPrompt = !empty($input['dismiss_prompt']);
+
+try {
+    $db = dbnmDb();
+    $stmt = $db->prepare(
+        'UPDATE users
+            SET display_name = NULLIF(?, ""),
+                phone = NULLIF(?, ""),
+                address_line1 = NULLIF(?, ""),
+                address_line2 = NULLIF(?, ""),
+                postal_code = NULLIF(?, ""),
+                city = NULLIF(?, ""),
+                address_region = NULLIF(?, ""),
+                country = NULLIF(?, ""),
+                preferred_language = ?,
+                profile_prompt_dismissed_at = CASE
+                    WHEN ? = 1 THEN COALESCE(profile_prompt_dismissed_at, NOW())
+                    ELSE profile_prompt_dismissed_at
+                END
+          WHERE id = ?'
+    );
+    $stmt->execute([
+        $displayName,
+        $phone,
+        $addressLine1,
+        $addressLine2,
+        $postalCode,
+        $city,
+        $addressRegion,
+        $country,
+        $preferredLanguage,
+        $dismissPrompt ? 1 : 0,
+        $userId,
+    ]);
+
+    if ($displayName !== '') {
+        $_SESSION['dbn_tools_user_name'] = $displayName;
+        $_SESSION['dbn_tools_sso_name'] = $displayName;
+    }
+    $_SESSION['lang'] = $preferredLanguage;
+
+    dbnToolsRespond([
+        'ok' => true,
+        'profile' => dbnToolsMainUserProfile($userId),
+    ]);
+} catch (Throwable $e) {
+    error_log('[profile] ' . $e->getMessage());
+    dbnToolsError('Could not save profile details.', 500, 'profile_save_failed');
+}