feat: account management panel — /accounts + /api/users/me

- Page /accounts: profil utilisateur éditable, comptes connectés, workspace members
- API GET/PUT /api/users/me: lecture/écriture profil local (full_name, email)
- Users list from local DB, auth via Gitea OAuth2
- Imports SessionManager clean dans api.py

app/routers/api.py

@@ -13,6 +13,7 @@ from app.config import settings
 from app.db import get_conn
 from app.routers.board import _issue_column, _map_issue_to_card, STATUS_COLORS, STATUS_LABELS
 from app.services.gitea_client import gitea
+from app.auth.session import SessionManager
 
 logger = logging.getLogger(__name__)
 router = APIRouter(tags=["api"], prefix="/api")
@@ -538,6 +539,40 @@ async def delete_checklist(checklist_id: int):
     return {"status": "ok"}
 
 
+# ── v1.0.0: User management ──
+
+@router.get("/users/me")
+async def get_my_profile(request: Request):
+    """Get current user profile."""
+    user = SessionManager.decode_session(request.cookies.get("flowdeck_session", ""))
+    if not user:
+        return {"login": "guest", "full_name": "Guest", "email": ""}
+    with get_conn() as conn:
+        row = conn.execute(
+            "SELECT * FROM users WHERE login=?", (user.get("login", ""),)
+        ).fetchone()
+        if row:
+            return dict(row)
+    return {"login": user.get("login", ""), "full_name": "", "email": ""}
+
+
+@router.put("/users/me")
+async def update_my_profile(request: Request, full_name: str = Query(default=""),
+                             email: str = Query(default="")):
+    """Update current user's local profile."""
+    user = SessionManager.decode_session(request.cookies.get("flowdeck_session", ""))
+    if not user:
+        raise HTTPException(401, "Not authenticated")
+    login = user.get("login", "")
+    with get_conn() as conn:
+        conn.execute(
+            "UPDATE users SET full_name=?, email=? WHERE login=?",
+            (full_name, email, login),
+        )
+        conn.commit()
+    return {"status": "ok"}
+
+
 # ── v0.5.0: Card priority & due date ──
 
 @router.post("/card/{owner}/{repo}/{issue_id}")