feat(admin/users): show all auth sources when a user has multiple credentials

listUsers() now LEFT JOINs local_credentials and returns has_local_credentials.
The auth source cell renders both the primary auth_source badge and a secondary
Local badge when an OIDC user also has local credentials set.

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

src/lib/server/users.ts

@@ -27,12 +27,16 @@ const normalizeEmail = (value?: string | null): string | null | undefined => {
 	return trimmed ? trimmed : null;
 };
 
-export function listUsers(): AppUser[] {
-	return db.all<AppUser>(
-		`SELECT id, username, full_name, email, auth_source, created_at, updated_at
-		 FROM users
-		 ORDER BY username COLLATE NOCASE`
-	);
+export function listUsers(): (AppUser & { has_local_credentials: boolean })[] {
+	return db
+		.all<AppUser & { has_local_credentials: 0 | 1 }>(
+			`SELECT u.id, u.username, u.full_name, u.email, u.auth_source, u.created_at, u.updated_at,
+			        CASE WHEN lc.user_id IS NOT NULL THEN 1 ELSE 0 END AS has_local_credentials
+			 FROM users u
+			 LEFT JOIN local_credentials lc ON lc.user_id = u.id
+			 ORDER BY u.username COLLATE NOCASE`
+		)
+		.map((row) => ({ ...row, has_local_credentials: row.has_local_credentials === 1 }));
 }
 
 export function upsertUserFromAuth(input: {