lorentz dc5dc913bd feat(09-02): GET + PUT /api/me/theme ... - ALLOWED_THEMES allowlist for light/dark/system - GET returns { theme, source: 'user'|'default' } - PUT validates against allowlist, writes session.user.id only - Uses updated_at (snake_case) — matches migration 012 schema - No userId from body (T-09-02-01 mitigation)		2026-05-10 07:28:03 -04:00
..
route.ts	feat(09-02): GET + PUT /api/me/theme	2026-05-10 07:28:03 -04:00