feat(recipes): add recipe visibility and sharing features

- Implemented functionality to set recipe visibility (public/private) with appropriate checks for user permissions.
- Added ability to share recipes with other users, including validation for existing users and permissions.
- Introduced new DTOs for setting visibility and sharing recipes.
- Updated RecipesController and RecipesService to handle new endpoints for visibility and sharing.
- Enhanced inventory preview to consider user permissions and shared recipes.
- Updated front-end to support new sharing and visibility features, including UI changes for recipe detail and admin user management.

flutter/lib/core/api/api_paths.dart

@@ -30,6 +30,9 @@ class RecipeApiPaths {
   static String detail(int id) => '/recipes/$id';
   static String update(int id) => '/recipes/$id';
   static String remove(int id) => '/recipes/$id';
+  static String setVisibility(int id) => '/recipes/$id/visibility';
+  static String share(int id) => '/recipes/$id/share';
+  static String unshare(int id, String username) => '/recipes/$id/share/${Uri.encodeComponent(username)}';
   static String inventoryPreview(int id) => '/recipes/$id/inventory-preview';
   static const parseMarkdown = '/recipes/parse-markdown';
 }
@@ -52,6 +55,7 @@ class UserApiPaths {
   static const list = '/users';
   static String setRole(int id) => '/users/$id/role';
   static String setPremium(int id) => '/users/$id/premium';
+  static String setRecipeSharing(int id) => '/users/$id/recipe-sharing';
   static String updateEmail(int id) => '/users/$id/email';
   static String delete(int id) => '/users/$id';
   static String resetPassword(int id) => '/users/$id/reset-password';

flutter/lib/core/auth/jwt_decoder.dart

@@ -24,3 +24,22 @@ String jwtRole(String? token) {
 
 /// Returns true if the JWT token contains role == 'admin'.
 bool jwtIsAdmin(String? token) => jwtRole(token) == 'admin';
+
+/// Returns username claim from JWT token, if present.
+String? jwtUsername(String? token) {
+  if (token == null || token.isEmpty) return null;
+  final claims = decodeJwtPayload(token);
+  final value = claims['username']?.toString().trim();
+  if (value == null || value.isEmpty) return null;
+  return value;
+}
+
+/// Returns user id claim from JWT token, if present.
+int? jwtUserId(String? token) {
+  if (token == null || token.isEmpty) return null;
+  final claims = decodeJwtPayload(token);
+  final raw = claims['sub'] ?? claims['userId'] ?? claims['id'];
+  if (raw is num) return raw.toInt();
+  if (raw is String) return int.tryParse(raw);
+  return null;
+}