Locked 1.1.0

Added

Moderator role

• New mod role sitting between member and owner
• Mods can delete any post or thread, edit any post, lock threads, pin threads, and change thread status
• Mod controls appear in the thread UI for users with the mod role
• Mod badge displayed next to username in the nav header and on profile pages

User management (owner only)

• Admin panel at /admin/users listing all registered users with role, post count, and join date
• Owners can promote any member to mod or demote any mod back to member via an inline dropdown — changes apply immediately
• Owner's own role is protected and cannot be changed from the admin panel
• Permission reference table on the admin page showing exactly what each role can and cannot do
• Flash messages on success or error after a role change

Changed

• Delete post, delete thread, lock, pin, and status actions now require mod or owner (previously owner-only)
• Edit post now allows mods to edit any post (previously only the author or owner)
• Owner nav now shows a Users link to the admin panel
• lib/auth.js exports new requireMod middleware