fix: restore API response formats + ai-ui-control ws + profile fields

- Restore {plugins: [...], total: N} for /plugins and /plugins/active-manifests
  (flat array broke frontend PluginRegistry → no menu items → empty UI)
- Restore {count: N} for /notifications/unread-count
  (scalar broke frontend notification badge)
- Fix ai_ui_control: on_install → on_activate for WS manager registration
  (WS 403 on every reconnect after container restart)
- Fix double /api/v1 prefix in useAIContext.ts and SuggestionBadge.tsx
- Add first_name, last_name, avatar_url to User model + migration 0032
- Extend UserUpdate schema with profile + password change fields
- Extend user_service.update_user with profile fields + password change
- Extend frontend UserResponse/UserUpdate types

app/routes/users.py

@@ -187,15 +187,36 @@ async def update_user(
     else:
         role_id = _UNSET
 
-    user = await user_service.update_user(
-        db,
-        tenant_id,
-        uid,
-        body.name,
-        body.role,
-        role_id,
-        body.is_active,
-    )
+    # Handle profile fields
+    if body.first_name is not None:
+        changes["first_name"] = body.first_name
+    if body.last_name is not None:
+        changes["last_name"] = body.last_name
+    if body.email is not None:
+        changes["email"] = body.email
+    if body.avatar_url is not None:
+        changes["avatar_url"] = body.avatar_url
+    if body.new_password is not None:
+        changes["password_changed"] = True
+
+    try:
+        user = await user_service.update_user(
+            db,
+            tenant_id,
+            uid,
+            body.name,
+            body.role,
+            role_id,
+            body.is_active,
+            body.first_name,
+            body.last_name,
+            body.avatar_url,
+            body.email,
+            body.current_password,
+            body.new_password,
+        )
+    except ValueError as exc:
+        raise HTTPException(400, detail={"detail": str(exc), "code": "invalid_password"}) from None
     if user is None:
         raise HTTPException(404, detail={"detail": "User not found", "code": "not_found"})
 
@@ -209,6 +230,9 @@ async def update_user(
         "id": str(user.id),
         "email": user.email,
         "name": user.name,
+        "first_name": user.first_name,
+        "last_name": user.last_name,
+        "avatar_url": user.avatar_url,
         "role": user.role,
         "role_id": str(user.role_id) if user.role_id else None,
         "is_active": user.is_active,