feat: user-scoped history/delete/rollback, dashboard & login UI, ignore *.pem

- Filter history/rollback/delete by user_id in secrets-core
- MCP tools/web pass user context; dashboard refresh; favicon static
- .gitignore *.pem; vscode tasks tweaks
- clippy: collapse else-if in rollback latest-history branch

Made-with: Cursor

crates/secrets-core/src/service/history.rs

@@ -17,7 +17,7 @@ pub async fn run(
     kind: &str,
     name: &str,
     limit: u32,
-    _user_id: Option<Uuid>,
+    user_id: Option<Uuid>,
 ) -> Result<Vec<HistoryEntry>> {
     #[derive(sqlx::FromRow)]
     struct Row {
@@ -27,17 +27,32 @@ pub async fn run(
         created_at: chrono::DateTime<chrono::Utc>,
     }
 
-    let rows: Vec<Row> = sqlx::query_as(
-        "SELECT version, action, actor, created_at FROM entries_history \
-         WHERE namespace = $1 AND kind = $2 AND name = $3 \
-         ORDER BY id DESC LIMIT $4",
-    )
-    .bind(namespace)
-    .bind(kind)
-    .bind(name)
-    .bind(limit as i64)
-    .fetch_all(pool)
-    .await?;
+    let rows: Vec<Row> = if let Some(uid) = user_id {
+        sqlx::query_as(
+            "SELECT version, action, actor, created_at FROM entries_history \
+             WHERE namespace = $1 AND kind = $2 AND name = $3 AND user_id = $4 \
+             ORDER BY id DESC LIMIT $5",
+        )
+        .bind(namespace)
+        .bind(kind)
+        .bind(name)
+        .bind(uid)
+        .bind(limit as i64)
+        .fetch_all(pool)
+        .await?
+    } else {
+        sqlx::query_as(
+            "SELECT version, action, actor, created_at FROM entries_history \
+             WHERE namespace = $1 AND kind = $2 AND name = $3 AND user_id IS NULL \
+             ORDER BY id DESC LIMIT $4",
+        )
+        .bind(namespace)
+        .bind(kind)
+        .bind(name)
+        .bind(limit as i64)
+        .fetch_all(pool)
+        .await?
+    };
 
     Ok(rows
         .into_iter()