feat(web): richer auth block in PublicLayout mobile menu + role-aware dashboard link

The mobile menu's logged-in footer previously showed just the user's
full name and a generic "Bảng điều khiển" button that always pointed
at /dashboard, even for ADMIN users whose real console lives at
/admin. The desktop header had the same ADMIN mis-route.

Mobile menu footer — now a compact account card:
- Avatar (avatarUrl) or initials fallback in a primary-tinted circle
  (getInitials handles single-word and multi-word names).
- Full name (truncated).
- Secondary line: email if present, otherwise phone.
- Role badge via ROLE_LABELS (Quản trị viên / Đại lý / Người bán /
  Người mua) — skipped when the role string isn't in the map.
- Primary CTA: routes to /admin for ADMIN, /dashboard otherwise.
  Button label flips to "Admin" vs "Bảng điều khiển" accordingly.
- Secondary CTA: /dashboard/profile with UserIcon.
- Tertiary: destructive-styled Đăng xuất button that calls the
  auth-store logout() action then router.push('/').

Desktop header: Dashboard button on the right now uses the same
dashboardHref + label computation so ADMIN users land on /admin.

i18n: added common.profile in both vi.json and en.json.

Verified at 375×812 (mobile preset): card + 3 buttons render within
viewport, initials bubble shows "HH" in red, role badge reads
"Quản trị viên".

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>

apps/web/messages/en.json

@@ -17,6 +17,7 @@
     "logout": "Logout",
     "admin": "Admin",
     "dashboard": "Dashboard",
+    "profile": "Profile",
     "errorCode": "Error code: {code}",
     "retriedCount": "Retried {count} times",
     "allRightsReserved": "© 2026 GoodGo. All rights reserved.",

apps/web/messages/vi.json

@@ -17,6 +17,7 @@
     "logout": "Đăng xuất",
     "admin": "Admin",
     "dashboard": "Bảng điều khiển",
+    "profile": "Hồ sơ",
     "errorCode": "Mã lỗi: {code}",
     "retriedCount": "Đã thử lại {count} lần",
     "allRightsReserved": "© 2026 GoodGo. Tất cả quyền được bảo lưu.",