Add Audible region config and user password change modal

Implements configurable Audible region selection in setup and admin settings, affecting all Audible API calls and triggering data refresh on change. Adds a user-facing 'Change Password' modal in the header for local users, moving password change from admin-only to all local users via a new /api/auth/change-password endpoint. Updates documentation, API routes, and context to support these features, and removes the old admin-only password change flow.

src/lib/services/auth/IAuthProvider.ts

@@ -11,6 +11,7 @@ export interface UserInfo {
   avatarUrl?: string;
   role?: string;           // 'admin' | 'user'
   isAdmin?: boolean;       // Deprecated: use role instead
+  authProvider?: string;   // 'plex' | 'oidc' | 'local'
 }
 
 export interface AuthTokens {

src/lib/services/auth/LocalAuthProvider.ts

@@ -125,6 +125,7 @@ export class LocalAuthProvider implements IAuthProvider {
           plexId: user.plexId,
           username: user.plexUsername,
           role: user.role,
+          authProvider: 'local',
         },
         tokens,
       };
@@ -223,6 +224,7 @@ export class LocalAuthProvider implements IAuthProvider {
           plexId: user.plexId,
           username: user.plexUsername,
           role: user.role,
+          authProvider: 'local',
         },
         tokens,
       };

src/lib/services/auth/OIDCAuthProvider.ts

@@ -455,6 +455,7 @@ export class OIDCAuthProvider implements IAuthProvider {
         email: user.plexEmail || undefined,
         avatarUrl: user.avatarUrl || undefined,
         isAdmin: user.role === 'admin',
+        authProvider: 'oidc',
       },
       isFirstLogin: isFirstUser && shouldTriggerJobs,
     };

src/lib/services/auth/PlexAuthProvider.ts

@@ -240,6 +240,7 @@ export class PlexAuthProvider implements IAuthProvider {
       email: user.plexEmail || undefined,
       avatarUrl: user.avatarUrl || undefined,
       isAdmin: user.role === 'admin',
+      authProvider: 'plex',
     };
   }