Initial commit: UOMysticmoon backend (Express + MariaDB + JWT)

- Layered API (router -> controller -> model -> db), serverlinkr pattern
- Public / auth / admin route groups; posts, wiki, settings, users, activity models
- JWT httpOnly-cookie auth (Secure auto-detected: LAN HTTP + Pangolin HTTPS)
- Site LIVE/MAINTENANCE mode with admin preview bypass
- Dual file+console logging (info/warn/error/debug) + HTTP access logs
- Docker Compose (app + MariaDB), schema.sql + seed, .env.example
- Verified end-to-end against MariaDB (27/27 smoke checks)

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>

server/src/model/settings/settings.db.js

@@ -0,0 +1,25 @@
+const { query } = require('../../utils/db')
+
+async function getAll() {
+  return query('SELECT `key`, value, updated_at FROM settings ORDER BY `key`')
+}
+
+async function get(key) {
+  const rows = await query('SELECT value FROM settings WHERE `key` = ? LIMIT 1', [key])
+  return rows[0] ? rows[0].value : null
+}
+
+async function set(key, value, updatedBy = null) {
+  await query(
+    'INSERT INTO settings (`key`, value, updated_by) VALUES (?, ?, ?) ' +
+      'ON DUPLICATE KEY UPDATE value = VALUES(value), updated_by = VALUES(updated_by)',
+    [key, value, updatedBy],
+  )
+}
+
+// Insert a default only if the key does not already exist.
+async function seedDefault(key, value) {
+  await query('INSERT IGNORE INTO settings (`key`, value) VALUES (?, ?)', [key, value])
+}
+
+module.exports = { getAll, get, set, seedDefault }