Página de votación de usuario (/vote-points) + enlace en cabecera

- lib/vote.ts: getVoteSites (home_votesite), registerVote (cooldown 12h30 vía
  home_votelog, acredita PV en home_api_points, registra el voto).
- Route /api/vote (POST {url}, guard sesión). Página /vote-points (VotePanel:
  abre el sitio + registra el voto, muestra PV/cooldown). Enlace "Votar" en cabecera.
- Cierra el ciclo con el admin de sitios de voto.

Verificado: /vote-points 200, POST 401 sin sesión; lógica probada: voto -> +PV,
segundo voto -> cooldown 12h29m.

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

web-next/components/Header.tsx

@@ -22,6 +22,9 @@ export async function Header() {
           <Link href="/forum" className="text-amber-200 hover:text-amber-400">
             {t('forum')}
           </Link>
+          <Link href="/vote-points" className="text-amber-200 hover:text-amber-400">
+            {t('vote')}
+          </Link>
           {loggedIn ? (
             <>
               <Link href="/account" className="text-amber-200 hover:text-amber-400">

web-next/components/VotePanel.tsx

@@ -0,0 +1,73 @@
+'use client'
+
+import { useState } from 'react'
+import { useTranslations } from 'next-intl'
+import type { VoteSite } from '@/lib/vote'
+
+export function VotePanel({ sites, canVote }: { sites: VoteSite[]; canVote: boolean }) {
+  const t = useTranslations('Vote')
+  const [busyId, setBusyId] = useState<number | null>(null)
+  const [message, setMessage] = useState<{ ok: boolean; text: string } | null>(null)
+
+  async function vote(site: VoteSite) {
+    if (busyId !== null) return
+    window.open(site.url, '_blank', 'noopener,noreferrer')
+    setBusyId(site.id)
+    setMessage(null)
+    try {
+      const res = await fetch('/api/vote', {
+        method: 'POST',
+        headers: { 'Content-Type': 'application/json' },
+        credentials: 'same-origin',
+        body: JSON.stringify({ url: site.url }),
+      })
+      const d: { success?: boolean; error?: string; points?: number; siteName?: string; hours?: number; minutes?: number } =
+        await res.json()
+      if (d.success) {
+        setMessage({ ok: true, text: t('success', { site: d.siteName ?? site.name, points: d.points ?? 0 }) })
+      } else if (d.error === 'cooldown') {
+        setMessage({ ok: false, text: t('cooldown', { hours: d.hours ?? 0, minutes: d.minutes ?? 0 }) })
+      } else {
+        setMessage({ ok: false, text: t(d.error === 'siteNotFound' ? 'siteNotFound' : 'genericError') })
+      }
+    } catch {
+      setMessage({ ok: false, text: t('genericError') })
+    } finally {
+      setBusyId(null)
+    }
+  }
+
+  if (sites.length === 0) return <p className="text-amber-200/70">{t('noSites')}</p>
+
+  return (
+    <>
+      <div className="flex flex-wrap justify-center gap-4">
+        {sites.map((s) => (
+          <div key={s.id} className="w-40 rounded-lg border border-amber-900/60 bg-[#241812] p-3 text-center">
+            {s.image_url && <img src={s.image_url} alt={s.name} className="mx-auto mb-2 max-h-16" />}
+            <p className="font-semibold text-amber-300">{s.name}</p>
+            <p className="mb-2 text-xs text-amber-200/60">
+              {s.points} {t('pv')}
+            </p>
+            {canVote ? (
+              <button
+                type="button"
+                onClick={() => vote(s)}
+                disabled={busyId !== null}
+                className="w-full rounded bg-amber-600 px-3 py-1 text-sm font-semibold text-[#1b120b] disabled:opacity-60"
+              >
+                {busyId === s.id ? t('voting') : t('vote')}
+              </button>
+            ) : (
+              <a href={s.url} target="_blank" rel="noopener noreferrer" className="text-sm text-sky-400 hover:underline">
+                {t('vote')}
+              </a>
+            )}
+          </div>
+        ))}
+      </div>
+      {message && <p className={`mt-4 text-center ${message.ok ? 'text-green-400' : 'text-red-400'}`}>{message.text}</p>}
+      {!canVote && <p className="mt-4 text-center text-sm text-amber-200/60">{t('loginToVote')}</p>}
+    </>
+  )
+}