Fix admin CSS not loading and quirks mode issues

Fixed multiple issues in admin panel:

1. CSS path: modern-normalize.css → modern-normalize.min.css
   (File is actually named .min.css)

2. Icon path: assets/icon.svg → /assets/admin_favicon.svg
   (Was relative, now absolute; correct filename)

3. Navigation: /admin/list.php → /admin/
   (list.php was renamed to index.php)

4. Short PHP tags: <? → <?php
   (Better compatibility, some servers don't enable short_open_tag)

5. Quirks mode warning was due to CSS not loading, not DOCTYPE
   (DOCTYPE was already present)

Files modified:
- public/admin/inc/head.php (main fixes)
- public/admin/index.php (short tags)
- public/admin/add.php (short tags)
- public/admin/import.php (short tags)

Need to redeploy for production: just deploy

public/admin/publish.php

@@ -0,0 +1,98 @@
+<?php
+// Bootstrap application
+require_once __DIR__ . "/../../config/bootstrap.php";
+
+/**
+ * Handle publish/unpublish actions for theses
+ */
+session_start();
+
+require_once __DIR__ . '/../../lib/Database.php';
+
+// Verify CSRF token
+if (!isset($_POST['csrf_token']) || !isset($_SESSION['csrf_token']) || !hash_equals($_SESSION['csrf_token'], $_POST['csrf_token'])) {
+    $_SESSION['error'] = "Erreur de sécurité : token invalide.";
+    header('Location: list.php');
+    exit;
+}
+
+$action = isset($_POST['action']) ? $_POST['action'] : '';
+$isBulk = isset($_POST['bulk']) && $_POST['bulk'] == '1';
+
+if (!in_array($action, ['publish', 'unpublish'])) {
+    $_SESSION['error'] = "Action invalide.";
+    header('Location: list.php');
+    exit;
+}
+
+try {
+    $db = new Database();
+    $pdo = $db->getPDO();
+
+    $isPublished = ($action === 'publish') ? 1 : 0;
+
+    if ($isBulk) {
+        // Handle bulk action
+        $thesisIds = isset($_POST['selected_theses']) ? $_POST['selected_theses'] : [];
+
+        if (empty($thesisIds)) {
+            $_SESSION['error'] = "Aucun TFE sélectionné.";
+            header('Location: list.php');
+            exit;
+        }
+
+        // Validate all IDs are integers
+        $thesisIds = array_map('intval', $thesisIds);
+        $thesisIds = array_filter($thesisIds, fn($id) => $id > 0);
+
+        if (empty($thesisIds)) {
+            $_SESSION['error'] = "IDs invalides.";
+            header('Location: list.php');
+            exit;
+        }
+
+        // Prepare placeholders for IN clause
+        $placeholders = str_repeat('?,', count($thesisIds) - 1) . '?';
+        $sql = "UPDATE theses SET is_published = ?, updated_at = CURRENT_TIMESTAMP WHERE id IN ($placeholders)";
+
+        $stmt = $pdo->prepare($sql);
+        $params = array_merge([$isPublished], $thesisIds);
+        $stmt->execute($params);
+
+        $count = count($thesisIds);
+        if ($action === 'publish') {
+            $_SESSION['success'] = "$count TFE(s) publié(s) avec succès!";
+        } else {
+            $_SESSION['success'] = "$count TFE(s) retiré(s) de la publication.";
+        }
+
+    } else {
+        // Handle single action
+        $thesisId = isset($_POST['thesis_id']) ? intval($_POST['thesis_id']) : 0;
+
+        if ($thesisId <= 0) {
+            $_SESSION['error'] = "ID invalide.";
+            header('Location: list.php');
+            exit;
+        }
+
+        $stmt = $pdo->prepare("UPDATE theses SET is_published = ?, updated_at = CURRENT_TIMESTAMP WHERE id = ?");
+        $stmt->execute([$isPublished, $thesisId]);
+
+        if ($action === 'publish') {
+            $_SESSION['success'] = "TFE publié avec succès!";
+        } else {
+            $_SESSION['success'] = "TFE retiré de la publication.";
+        }
+    }
+
+} catch (Exception $e) {
+    error_log("Publish error: " . $e->getMessage());
+    $_SESSION['error'] = "Erreur lors de la modification: " . $e->getMessage();
+}
+
+// Regenerate CSRF token
+$_SESSION['csrf_token'] = bin2hex(random_bytes(32));
+
+header('Location: list.php');
+exit;