fix: both logout buttons now use inline onclick — no JS handlers

- Header #logout-btn: inline fetch+clear localStorage+redirect
- Settings #profile-logout: inline window.handleLogout or fetch fallback
- Removed all JS event listeners that were causing race conditions
- Zero dependency on ES module loading order

frontend/index.html

@@ -661,6 +661,7 @@
                                     id="logout-btn"
                                     type="button"
                                     role="menuitem"
+                                    onclick="fetch('/api/auth/logout',{method:'POST',credentials:'include'}).then(function(){localStorage.clear();window.location.href='/'}).catch(function(){localStorage.clear();window.location.href='/'})"
                                 >
                                     <span
                                         class="menu-list-icon"

frontend/js/auth.js

@@ -207,7 +207,7 @@ const AuthManager = {
     safeCreateIcons();
 
     const logoutBtn = document.getElementById("logout-btn");
-    if (logoutBtn) logoutBtn.addEventListener("click", () => AuthManager.logout());
+    // Logout button — handled inline in index.html
 
     const adminRow = document.getElementById("admin-menu-row");
     if (adminRow) {