Fix navbar: SVG logos, Settings menu, Logout handler

- Image handler now returns SVG placeholders for company logo and user
  avatars instead of broken 1x1 PNG (fixes yellow border in navbar)
- Supports both query-param (?model=&field=) and path-style URLs
  (/web/image/res.partner/2/avatar_128)
- Added Settings app menu with Users & Technical sub-menus
- Added actions for Settings (company form), Users list, Sequences
- Added /web/session/logout handler that clears session + cookie
- Added logout to middleware whitelist

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

pkg/server/action.go

@@ -241,6 +241,52 @@ func (s *Server) handleActionLoad(w http.ResponseWriter, r *http.Request) {
 			"help":           "",
 			"xml_id":         "fleet.action_fleet_vehicle",
 		},
+		100: {
+			"id":             100,
+			"type":           "ir.actions.act_window",
+			"name":           "Settings",
+			"res_model":      "res.company",
+			"res_id":         1,
+			"view_mode":      "form",
+			"views":          [][]interface{}{{nil, "form"}},
+			"search_view_id": false,
+			"domain":         "[]",
+			"context":        "{}",
+			"target":         "current",
+			"limit":          80,
+			"help":           "",
+			"xml_id":         "base.action_res_company_form",
+		},
+		101: {
+			"id":             101,
+			"type":           "ir.actions.act_window",
+			"name":           "Users",
+			"res_model":      "res.users",
+			"view_mode":      "list,form",
+			"views":          [][]interface{}{{nil, "list"}, {nil, "form"}},
+			"search_view_id": false,
+			"domain":         "[]",
+			"context":        "{}",
+			"target":         "current",
+			"limit":          80,
+			"help":           "",
+			"xml_id":         "base.action_res_users",
+		},
+		102: {
+			"id":             102,
+			"type":           "ir.actions.act_window",
+			"name":           "Sequences",
+			"res_model":      "ir.sequence",
+			"view_mode":      "list,form",
+			"views":          [][]interface{}{{nil, "list"}, {nil, "form"}},
+			"search_view_id": false,
+			"domain":         "[]",
+			"context":        "{}",
+			"target":         "current",
+			"limit":          80,
+			"help":           "",
+			"xml_id":         "base.ir_sequence_form",
+		},
 	}
 
 	action, ok := actions[actionID]