fix: impersonation, dashboard counter, logo lightbox, submission config, auth logs

- Fix impersonation by bypassing useSession().update() loading gate with direct session POST
- Fix dashboard account counter defaulting to latest round with PASSED projects
- Add clickToEnlarge lightbox for project logos on admin detail page
- Remove submission eligibility config (all passed projects must upload)
- Suppress CredentialsSignin auth errors in production (minified name check)

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

src/lib/auth.ts

@@ -18,7 +18,8 @@ export const { handlers, auth, signIn, signOut } = NextAuth({
   logger: {
     error(error) {
       // CredentialsSignin is expected (wrong password, bots) — already logged to AuditLog with detail
-      if (error?.name === 'CredentialsSignin') return
+      // Check both name and type: name gets minified in production builds
+      if (error?.name === 'CredentialsSignin' || (error as unknown as { type?: string })?.type === 'CredentialsSignin') return
       console.error('[auth][error]', error)
     },
     warn(code) {