VPR-151 feat(auth): Dynamic login screen

- Replace direct /login redirect with /welcome landing page across
  Razor and Vue (cookie LoginPath, profile button, session timeout,
  generic error, RequireLogin composable)
- Validate ReturnUrl with Url.IsLocalUrl on Login/TwoFactor to close
  open-redirect paths
- Refresh SVM branding: shared _ViperBrand lockup (rod mark + stacked
  school name) replaces UCDSVMLogo on the welcome page and main layout;
  self-host Proxima Nova (woff2) in place of Google Fonts Roboto
- Add AVIF hero/brand images with JPEG/PNG fallback and recompress the
  login photos (~60% smaller); preload the AVIF hero with a type hint
- Serve /fonts with a year-long immutable Cache-Control header
- Add Dev/Test environment badges to the layout toolbar and a members
  sign-in banner to the CAHFS auth page
- Drop the dead v-show="false" loading-placeholder markup duplicated in
  both Vue layouts (the real skeleton lives in the Razor shells)

Author: rlorenzo

VueApp/src/CAHFS/pages/CAHFSAuth.vue

@@ -1,5 +1,37 @@
 <template>
-    <ContentBlock content-block-name="cahfs-login"></ContentBlock>
+    <div>
+        <ContentBlock content-block-name="cahfs-login"></ContentBlock>
+
+        <q-card
+            flat
+            bordered
+            class="bg-ucdavis-blue-10 q-mt-md"
+        >
+            <q-card-section class="row items-center no-wrap">
+                <q-icon
+                    name="login"
+                    color="primary"
+                    size="sm"
+                    class="q-mr-md"
+                />
+                <div>
+                    <h2 class="text-subtitle1 text-weight-bold text-primary q-mt-none q-mb-xs">Members sign-in</h2>
+                    <div class="text-body2">
+                        Sign in with your UC Davis account to open web reports and section pages.
+                    </div>
+                </div>
+            </q-card-section>
+            <q-card-actions class="q-px-md q-pb-md">
+                <q-btn
+                    :href="loginHref"
+                    type="a"
+                    color="primary"
+                    no-caps
+                    label="Sign in"
+                />
+            </q-card-actions>
+        </q-card>
+    </div>
 </template>
 
 <script setup lang="ts">
@@ -8,12 +40,14 @@ import { inject, onMounted } from "vue"
 import { useRouter } from "vue-router"
 import { useFetch } from "@/composables/ViperFetch"
 import { useUserStore } from "@/store/UserStore"
+import { getLoginUrl } from "@/composables/RequireLogin"
 import ContentBlock from "@/CMS/components/ContentBlock.vue"
 
 const router = useRouter()
 const baseUrl = inject<string>("apiURL")
 const userStore = useUserStore()
 const $q = useQuasar()
+const loginHref = getLoginUrl()
 
 async function checkAuth() {
     $q.loading.show({

VueApp/src/CTS/pages/CtsHome.vue

@@ -50,7 +50,9 @@ async function initPage() {
     const r = await get(baseUrl + "loggedInUser")
     if (!r.success || !r.result.userId) {
         window.location.href =
-            import.meta.env.VITE_VIPER_HOME + "login?ReturnUrl=" + import.meta.env.VITE_VIPER_HOME + "CTS/"
+            import.meta.env.VITE_VIPER_HOME +
+            "welcome?ReturnUrl=" +
+            encodeURIComponent(import.meta.env.VITE_VIPER_HOME + "CTS/" + window.location.search)
     } else {
         userStore.loadUser(r.result)
     }