feat(profile): store the public profile look

readme.md

@@ -36,7 +36,9 @@ To Be Played is split into three repositories:
   banner from the user's own game art. Only whitelisted presets and Steam app ids are stored, never raw CSS or URLs.
 - Opt-in public profile at `/u/<display name>`. Auth answers with a short-lived **profile ticket** (EdDSA JWT,
   10 minutes, `typ=public-profile`) that Core accepts for the public library data only. Its `profileStats` claim
-  names the stat groups the user chose to show there (none by default). The ticket is not a login:
+  names the stat groups the user chose to show there (none by default), its `sections` claim the parts of the
+  profile the user shows. The profile has its own look (accent, corners, banner and background from own game art,
+  sections in order), apart from the app appearance, and the public answer sends it as `style`. The ticket is not a login:
   both services reject every token with a `typ` claim on normal endpoints.
 - **Roles**: one per user, a ladder `USER < AUDITOR < PLATFORM_ADMIN` (`users.role`, the first admin is set by
   SQL). The access token carries the active role in the `role` claim. **View as**: an admin switches the own login
@@ -90,6 +92,7 @@ To Be Played is split into three repositories:
 | `GET` | `/api/steam-link/callback` | public, Steam's redirect back; binding cookie; redirects to the frontend settings |
 | `PUT` | `/api/users/settings/appearance` | access token |
 | `PUT` | `/api/users/settings/profile-stats` (`{groups}`: `PILE`, `TOP_GAMES`, `TASTE`, `HABITS`, `FINISHED`, `TREND`; `204`) | access token |
+| `PUT` | `/api/users/settings/profile-style` (`{accent, corners, bannerAppid, backgroundAppid, sections}`, sections from `SUMMARY`, `STATUS`, `PLAYING`, `FINISHED`, `STATS` in their order; `204`) | access token |
 | `GET` | `/api/public/profiles/{displayName}` | public |
 | `GET` | `/api/stats/public` | public |
 | `GET` | `/api/version` (`{commit, builtAt}` of the running image, from the CI build; `dev` locally) | public |