feat(offline): detect server offline and keep returning users signed in

Previously, if the backend was unreachable at launch, the splash screen
routed to the login screen. The server URL remained persisted in
SharedPreferences but visually appeared lost, frustrating any user who
isn't the service operator.

- New AuthStatus.offline distinguishes network failures (NetworkException)
  from HTTP 401 in AuthNotifier.verify().
- Persist has_ever_logged_in flag on first successful verify/login.
- Offline + ever-logged-in lands on the briefing with a sticky offline
  banner (retry button) instead of being punted to login.
- OfflineBanner widget is Tier-2-ready so we can surface "last sync X min
  ago" once real caching lands (Fable task #147).

lib/providers/auth_provider.dart

@@ -1,8 +1,10 @@
 import 'package:flutter_riverpod/flutter_riverpod.dart';
 
+import '../core/exceptions.dart';
 import 'api_client_provider.dart';
+import 'settings_provider.dart';
 
-enum AuthStatus { unknown, authenticated, unauthenticated }
+enum AuthStatus { unknown, authenticated, unauthenticated, offline }
 
 final authProvider = NotifierProvider<AuthNotifier, AuthStatus>(AuthNotifier.new);
 
@@ -14,7 +16,12 @@ class AuthNotifier extends Notifier<AuthStatus> {
     try {
       final repo = ref.read(authRepositoryProvider);
       final ok = await repo.verify();
+      if (ok) {
+        await ref.read(hasEverLoggedInProvider.notifier).markLoggedIn();
+      }
       state = ok ? AuthStatus.authenticated : AuthStatus.unauthenticated;
+    } on NetworkException {
+      state = AuthStatus.offline;
     } catch (_) {
       state = AuthStatus.unauthenticated;
     }
@@ -23,6 +30,7 @@ class AuthNotifier extends Notifier<AuthStatus> {
   Future<void> login(String username, String password) async {
     final repo = ref.read(authRepositoryProvider);
     await repo.login(username, password);
+    await ref.read(hasEverLoggedInProvider.notifier).markLoggedIn();
     state = AuthStatus.authenticated;
   }
 

lib/providers/settings_provider.dart

@@ -7,6 +7,7 @@ import 'api_client_provider.dart';
 const _kServerUrl = 'server_url';
 const _kThemeMode = 'theme_mode';
 const _kForgejoRepoUrl = 'forgejo_repo_url';
+const _kHasEverLoggedIn = 'has_ever_logged_in';
 
 final sharedPreferencesProvider = Provider<SharedPreferences>((ref) {
   throw UnimplementedError('Override in ProviderScope');
@@ -85,6 +86,31 @@ class ServerUrlNotifier extends Notifier<String?> {
   }
 }
 
+/// Tracks whether this install has ever completed a successful login.
+/// Used so offline users who've logged in before land on the briefing (with a
+/// banner) instead of being dumped onto the login screen as if freshly installed.
+final hasEverLoggedInProvider =
+    NotifierProvider<HasEverLoggedInNotifier, bool>(HasEverLoggedInNotifier.new);
+
+class HasEverLoggedInNotifier extends Notifier<bool> {
+  @override
+  bool build() {
+    final prefs = ref.watch(sharedPreferencesProvider);
+    return prefs.getBool(_kHasEverLoggedIn) ?? false;
+  }
+
+  Future<void> markLoggedIn() async {
+    if (state) return;
+    await ref.read(sharedPreferencesProvider).setBool(_kHasEverLoggedIn, true);
+    state = true;
+  }
+
+  Future<void> clear() async {
+    await ref.read(sharedPreferencesProvider).remove(_kHasEverLoggedIn);
+    state = false;
+  }
+}
+
 final serverSettingsProvider =
     AsyncNotifierProvider<ServerSettingsNotifier, Map<String, dynamic>>(
         ServerSettingsNotifier.new);