feat(web): system settings pages (status, database, backups, logs, updates, licenses, about) (#942)

.github/workflows/frontend-tests.yml

@@ -11,6 +11,8 @@ on:
       - "apps/web/**"
       - "apps/packages/**"
       - "apps/pnpm-lock.yaml"
+      - "apps/backend/go.mod"
+      - "apps/backend/go.sum"
       - ".github/workflows/frontend-tests.yml"
       - "!**/*.md"
       - "!**/*.mdx"
@@ -25,6 +27,8 @@ on:
       - "apps/web/**"
       - "apps/packages/**"
       - "apps/pnpm-lock.yaml"
+      - "apps/backend/go.mod"
+      - "apps/backend/go.sum"
       - ".github/workflows/frontend-tests.yml"
       - "!**/*.md"
       - "!**/*.mdx"
@@ -61,6 +65,35 @@ jobs:
       - name: Install dependencies
         run: pnpm install --frozen-lockfile
 
+      - name: Set up Go
+        uses: actions/setup-go@v6
+        with:
+          go-version-file: apps/backend/go.mod
+          cache-dependency-path: apps/backend/go.sum
+
+      - name: Install go-licenses
+        run: go install github.com/google/go-licenses@latest
+
+      - name: Regenerate OSS licenses manifest
+        run: pnpm --filter @kandev/web licenses:gen
+
+      - name: Verify licenses manifest is fresh
+        shell: bash
+        continue-on-error: true
+        run: |
+          set -euo pipefail
+          # `defaults.run.working-directory` is `apps`, so the path is relative.
+          # The diff is reported as a warning, not a hard failure: `go-licenses`
+          # resolves slightly different license metadata across platforms (macOS
+          # dev vs. ubuntu CI) for the same Go modules, and we have not yet
+          # eliminated that drift. The committed file is still the source of
+          # truth for what the page renders.
+          if ! git diff --quiet --exit-code web/generated/licenses.json; then
+            echo "::warning::apps/web/generated/licenses.json differs from a fresh re-run."
+            echo "::warning::Run 'pnpm --filter @kandev/web licenses:gen' and commit if the drift is real."
+            git --no-pager diff --stat web/generated/licenses.json || true
+          fi
+
       - name: Check formatting
         shell: bash
         run: |