separate account settings from shop settings

- Create dedicated /admin/account page for user account management
- Move email, password, and 2FA settings from /admin/settings
- Add Account link to top of admin sidebar navigation
- Add TOTP-based two-factor authentication with NimbleTOTP
- Add TOTP verification LiveView for login flow
- Add AccountController for TOTP session management
- Remove Advanced section from settings (duplicated in dev tools)
- Remove user email from sidebar footer (replaced by Account link)

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>

test/berrypod_web/live/admin/settings_test.exs

@@ -5,7 +5,6 @@ defmodule BerrypodWeb.Admin.SettingsTest do
   import Berrypod.AccountsFixtures
   import Berrypod.ProductsFixtures
 
-  alias Berrypod.Accounts
   alias Berrypod.Settings
 
   setup do
@@ -166,80 +165,6 @@ defmodule BerrypodWeb.Admin.SettingsTest do
     end
   end
 
-  describe "account section" do
-    setup %{conn: conn, user: user} do
-      conn = log_in_user(conn, user)
-      %{conn: conn, user: user}
-    end
-
-    test "renders email and password forms", %{conn: conn, user: user} do
-      {:ok, view, html} = live(conn, ~p"/admin/settings")
-
-      assert html =~ "Account"
-      assert html =~ user.email
-      assert has_element?(view, "#email_form")
-      assert has_element?(view, "#password_form")
-    end
-
-    test "validates email change", %{conn: conn} do
-      {:ok, view, _html} = live(conn, ~p"/admin/settings")
-
-      result =
-        view
-        |> element("#email_form")
-        |> render_change(%{"user" => %{"email" => "with spaces"}})
-
-      assert result =~ "must have the @ sign and no spaces"
-    end
-
-    test "submits email change", %{conn: conn} do
-      {:ok, view, _html} = live(conn, ~p"/admin/settings")
-
-      result =
-        view
-        |> form("#email_form", %{"user" => %{"email" => unique_user_email()}})
-        |> render_submit()
-
-      assert result =~ "A link to confirm your email"
-    end
-
-    test "validates password", %{conn: conn} do
-      {:ok, view, _html} = live(conn, ~p"/admin/settings")
-
-      result =
-        view
-        |> element("#password_form")
-        |> render_change(%{
-          "user" => %{
-            "password" => "short",
-            "password_confirmation" => "mismatch"
-          }
-        })
-
-      assert result =~ "should be at least 12 character(s)"
-    end
-
-    test "submits valid password change", %{conn: conn, user: user} do
-      new_password = valid_user_password()
-      {:ok, view, _html} = live(conn, ~p"/admin/settings")
-
-      form =
-        form(view, "#password_form", %{
-          "user" => %{
-            "email" => user.email,
-            "password" => new_password,
-            "password_confirmation" => new_password
-          }
-        })
-
-      render_submit(form)
-      new_password_conn = follow_trigger_action(form, conn)
-
-      assert redirected_to(new_password_conn) == ~p"/admin/settings"
-      assert Accounts.get_user_by_email_and_password(user.email, new_password)
-    end
-  end
-
   describe "from address" do
     setup %{conn: conn, user: user} do
       conn = log_in_user(conn, user)
@@ -256,27 +181,12 @@ defmodule BerrypodWeb.Admin.SettingsTest do
     test "saves from address", %{conn: conn} do
       {:ok, view, _html} = live(conn, ~p"/admin/settings")
 
-      html =
-        view
-        |> form("form[phx-submit=\"save_from_address\"]", %{from_address: "shop@example.com"})
-        |> render_submit()
+      view
+      |> form("form[phx-submit=\"save_from_address\"]", %{from_address: "shop@example.com"})
+      |> render_submit()
 
       assert has_element?(view, ".admin-inline-feedback-saved")
       assert Settings.get_setting("email_from_address") == "shop@example.com"
     end
   end
-
-  describe "advanced section" do
-    setup %{conn: conn, user: user} do
-      conn = log_in_user(conn, user)
-      %{conn: conn}
-    end
-
-    test "shows links to system tools", %{conn: conn} do
-      {:ok, view, _html} = live(conn, ~p"/admin/settings")
-
-      assert has_element?(view, ~s(a[href="/admin/dashboard"]), "System dashboard")
-      assert has_element?(view, ~s(a[href="/admin/errors"]), "Error tracker")
-    end
-  end
 end