Merge watch profiles into user accounts — one profile per login, no picker

- Removed the "Who's Watching" sub-profile picker entirely: ProfileProvider now
  auto-resolves the single profile tied to the account immediately after login
- Backend: removed POST/DELETE /profiles (no more creating/deleting extra
  profiles — lifecycle is entirely driven by user create/delete, already wired
  in the admin Users CRUD); kept GET (internal) and PATCH (edit your own
  profile's avatar/kids-mode/rating cap)
- Deleted ProfileSelect page and the now-unused ProtectedRoute component
- Navbar: removed the "switch profile" action, account avatar is now just a
  static display
- api.js: dropped the now-dead X-Profile-Id header logic (backend already
  falls back to the account's single profile when the header is absent)

frontend/src/App.js

@@ -2,7 +2,6 @@ import { BrowserRouter, Routes, Route, Navigate, useLocation } from "react-route
 import { Toaster } from "sonner";
 import { AuthProvider, useAuth } from "./lib/auth";
 import { ProfileProvider, useProfile } from "./lib/profile";
-import ProtectedRoute from "./components/ProtectedRoute";
 import Navbar from "./components/Navbar";
 import GrainOverlay from "./components/GrainOverlay";
 import ServiceStatus from "./components/ServiceStatus";
@@ -17,7 +16,6 @@ import Admin from "./pages/Admin";
 import AdminUpload from "./pages/AdminUpload";
 import Settings from "./pages/Settings";
 import RadarrImport from "./pages/RadarrImport";
-import ProfileSelect from "./pages/ProfileSelect";
 import TranscodeQueue from "./pages/TranscodeQueue";
 import Shows from "./pages/Shows";
 import ShowDetail from "./pages/ShowDetail";
@@ -30,11 +28,10 @@ const ProfileGate = ({ children }) => {
   const { user, loading: authLoading } = useAuth();
   const { active, loading: profLoading } = useProfile();
   const loc = useLocation();
-  if (authLoading || profLoading) {
+  if (authLoading || profLoading || (user && !active)) {
     return <div className="min-h-screen flex items-center justify-center bg-[#050505] text-[#8A8A8A]">Loading…</div>;
   }
   if (!user) return <Navigate to="/login" state={{ from: loc.pathname }} replace />;
-  if (!active) return <Navigate to="/profile" replace />;
   return children;
 };
 
@@ -50,7 +47,7 @@ const Shell = ({ children }) => {
   const { user } = useAuth();
   const { active } = useProfile();
   const loc = useLocation();
-  const hideChrome = loc.pathname.startsWith("/watch") || loc.pathname === "/login" || loc.pathname === "/register" || loc.pathname === "/profile";
+  const hideChrome = loc.pathname.startsWith("/watch") || loc.pathname === "/login" || loc.pathname === "/register";
   return (
     <>
       {!hideChrome && user && active && <Navbar />}
@@ -63,10 +60,9 @@ const Shell = ({ children }) => {
 
 const RootRedirect = () => {
   const { user, loading } = useAuth();
-  const { active, loading: pl } = useProfile();
+  const { loading: pl } = useProfile();
   if (loading || pl) return <div className="min-h-screen flex items-center justify-center bg-[#050505] text-[#8A8A8A]">Loading…</div>;
   if (!user) return <Navigate to="/login" replace />;
-  if (!active) return <Navigate to="/profile" replace />;
   return <Navigate to="/browse" replace />;
 };
 
@@ -81,7 +77,6 @@ function App() {
                 <Route path="/" element={<RootRedirect />} />
                 <Route path="/login" element={<Login />} />
                 <Route path="/register" element={<Register />} />
-                <Route path="/profile" element={<ProtectedRoute><ProfileSelect /></ProtectedRoute>} />
                 <Route path="/browse" element={<ProfileGate><Browse /></ProfileGate>} />
                 <Route path="/shows" element={<ProfileGate><Shows /></ProfileGate>} />
                 <Route path="/show/:id" element={<ProfileGate><ShowDetail /></ProfileGate>} />