perf(frontend,config): parallelize auth, virtualize logs, cache public configs

Frontend layout renders immediately; pages gate via RequireAuth and
useAuthRedirect. Login/register skip getUserInfo. Admin log panel uses
useVirtualizer to avoid 2000-row DOM. ListVisibleSystemConfigs caches
visibility=1 configs in Redis with invalidation on create/update.
PERFORMANCE.md marks completed optimizations.

internal/apps/config/public_config_cache_test.go

@@ -0,0 +1,75 @@
+// Copyright 2026 Arctel.net
+// SPDX-License-Identifier: Apache-2.0
+
+package config
+
+import (
+	"context"
+	"testing"
+
+	"github.com/Rain-kl/Wavelet/internal/db"
+	"github.com/Rain-kl/Wavelet/internal/model"
+	"github.com/Rain-kl/Wavelet/internal/testhelper"
+)
+
+func TestListVisibleSystemConfigsUsesRedisCache(t *testing.T) {
+	dbConn, _, cleanup := testhelper.SetupTestEnvironment(t)
+	defer cleanup()
+	ctx := context.Background()
+
+	if err := model.InvalidateVisibleSystemConfigsCache(ctx); err != nil {
+		t.Fatalf("InvalidateVisibleSystemConfigsCache() error = %v", err)
+	}
+
+	if _, err := model.ListVisibleSystemConfigs(ctx); err != nil {
+		t.Fatalf("ListVisibleSystemConfigs() warm cache error = %v", err)
+	}
+
+	if err := dbConn.Create(&model.SystemConfig{
+		Key:         "cache_probe_public_key",
+		Value:       "cache_probe_public_value",
+		Type:        "system",
+		Visibility:  model.ConfigVisibilityVisible,
+		Description: "cache probe",
+	}).Error; err != nil {
+		t.Fatalf("Create(cache_probe_public_key) error = %v", err)
+	}
+
+	cached, err := model.ListVisibleSystemConfigs(ctx)
+	if err != nil {
+		t.Fatalf("ListVisibleSystemConfigs() cached call error = %v", err)
+	}
+	for _, item := range cached {
+		if item.Key == "cache_probe_public_key" {
+			t.Fatal("cached visible config list should be stale before invalidation")
+		}
+	}
+
+	exists, err := db.Redis.Exists(ctx, db.PrefixedKey(model.SystemConfigVisibleListRedisKey)).Result()
+	if err != nil {
+		t.Fatalf("Redis.Exists() error = %v", err)
+	}
+	if exists == 0 {
+		t.Fatal("expected visible config list cache key to exist")
+	}
+
+	if err := model.InvalidateVisibleSystemConfigsCache(ctx); err != nil {
+		t.Fatalf("InvalidateVisibleSystemConfigsCache() error = %v", err)
+	}
+
+	refreshed, err := model.ListVisibleSystemConfigs(ctx)
+	if err != nil {
+		t.Fatalf("ListVisibleSystemConfigs() refreshed call error = %v", err)
+	}
+
+	var found bool
+	for _, item := range refreshed {
+		if item.Key == "cache_probe_public_key" {
+			found = true
+			break
+		}
+	}
+	if !found {
+		t.Fatal("refreshed visible config list should include newly created public config")
+	}
+}