feat: add admin channel directory to server settings

[gusye1234]

Server owners and administrators can open Server Settings → Channels, immediately after Members, to inspect every top-level text/forum channel in their server, including private channels they have not joined. Rows show group, channel name, creator and creation time; listing metadata does not grant private-message access.

The 77-line Settings view renders its own group headers and readonly rows. Public groups reserve a blank icon slot; private groups show a lock. Native buttons handle collapse, creator handles use the existing MentionPill, and long channel names wrap on mobile. The original channel panel, sortable components, sidebar tests and composer picker have zero diff against PR base 266ff110b65c4b15841a9794a5b568bab9577de2.

The admin-only GET /api/community/servers/{id}/channels/admin uses primary-DB authorization and a server-scoped metadata query, excludes child threads/DMs and deleted creator details, and returns Cache-Control: private, no-store. It runs only when Channels is selected and uses an isolated, non-persisted query cache with request cancellation and role/server guards. No dependencies or schema migrations are added. The complete PR is 16 files, +707/−5, including frontend and backend.

Validation on final SHA d5583ba288b3691177106439e938506d10df9122:

• Local Settings/access/hook DOM checks 13/13; unchanged original sidebar touch-DND contract 2/2; affected-file ESLint and web TypeScript pass. Checks were limited to affected scope and serialized as requested.
• Independent browser QA passed original channel clicks, group folding, menus, mouse sorting with PATCH/D1/reload persistence, keyboard activation/cancellation and ordinary-member keyboard behavior. Composer picker mouse and keyboard selection passed; test drafts were cleared without sending. Keyboard sorting persistence is not claimed.
• Independent Settings pointer/Enter/Space folding passed without additional directory responses. Actual 1360×960 desktop and 390×844 mobile light/dark screenshots passed visual review; long names wrap and metadata stays within the viewport. Final artifacts and sanitized evidence were delivered in Alook issue No fetch timeout/abort controllers across codebase #152 messages Chat TaskStream: Collapse status/steps/thinking into single row with Sheet expansion #171 and fix(daemon): resolve task cancellation delay caused by empty agentId #174, approved in Channel operations need loading state and double-click prevention #172 and fix: add loading state & double-click prevention to channel operations #175.
• Unchanged backend authorization, private-message 403, lazy loading, server isolation and role-loss/cache behavior retain earlier functional evidence; those tests are not reported as newly rerun browser journeys.
• Exact-SHA remote CI is green, including all 12 UI Playwright shards, CI Gate and UI E2E Gate.
• The exact-SHA Codecov patch check passed: 100.00% of diff hit, target 100.00%. The existing Codecov Report lists no uncovered modified lines and does not provide a project coverage percentage; its comment body and timestamp remain unchanged from the earlier candidate. The numeric final-SHA claim comes from the linked check run.
• QA previews and browsers are closed; ports 3000/3001/3002/8789/8790 are released. Delivery worktree is clean and retained until merge/cleanup authorization.

[codecov]

Codecov Report

✅ All modified and coverable lines are covered by tests.

📢 Thoughts on this report? Let us know!