Fix profile persistence + badge ribbon alignment; 24h sessions

- BUG: /api/me never returned avatarUrl/bio/socials/lineBanner fields, so the
  Profile pane repopulated empty on reload — data WAS saved, just not surfaced.
  Now returned so avatar, bio, and social links persist visibly.
- Achievement badge: member name drops the "@" and sits on a per-badge ribbonY
  (spark .728 / surge .779 / circuit .713 / nexus .709), gold with dark outline.
- Sessions now expire in 24h (was 30d) so members re-login daily and see the
  login ad each day.

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>

server.js

@@ -432,7 +432,11 @@ const server = http.createServer(async (req, res) => {
       const out = { signedIn: true, email: s.email || (acct && acct.email) || null,
         address: s.address || (acct && acct.address) || null, memberId,
         username: (acct && acct.username) || null,
-        refCode: (acct && acct.code) || null, sponsorId };
+        refCode: (acct && acct.code) || null, sponsorId,
+        // profile + line-banner fields so the Profile pane repopulates on reload (were being saved but not returned)
+        avatarUrl: (acct && acct.avatarUrl) || null, bio: (acct && acct.bio) || null,
+        socials: (acct && acct.socials) || null,
+        lineBannerUrl: (acct && acct.lineBannerUrl) || null, lineTargetUrl: (acct && acct.lineTargetUrl) || null };
       if (memberId) {
         try {
           const mm = await chain.member(memberId);