Magic link auth, admin role hierarchy, content curation badges (v1.9.0)

- Replace password login with email magic link flow (passcode + 6-digit code by email)
- Admin role hierarchy: owner (jakechen@gmail.com), revokable admins (zsembay8@uab.edu, jakechen@uab.edu)
- Change default passcode from SPARC2026 to AIMED2026
- Add Resend email service for sending login codes
- Add MagicCode model for storing 6-digit verification codes
- Add New/Updated curation badges on publications, software, and honors pages
- Add /api/curated-items endpoint for recently approved content

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

Author: jakechen1

package-lock.json

@@ -25,6 +25,7 @@
     "prisma": "^7.6.0",
     "react": "19.2.4",
     "react-dom": "19.2.4",
+    "resend": "^6.10.0",
     "tailwind-merge": "^3.5.0"
   },
   "devDependencies": {

package.json

@@ -265,6 +265,17 @@ model ActivationCode {
   createdAt DateTime @default(now())
 }
 
+model MagicCode {
+  id        Int      @id @default(autoincrement())
+  email     String
+  code      String   // 6-digit numeric code
+  expiresAt DateTime
+  used      Boolean  @default(false)
+  createdAt DateTime @default(now())
+
+  @@index([email, code])
+}
+
 model QuarterlyGoal {
   id          Int       @id @default(autoincrement())
   memberId    Int