refactor(admin): unify webui fetch/copy/format helpers; fix audit tab load and delete-group count

- apiFetch + shared needLogin (any 401 shows the login card) replaces six
  duplicated fetch/401/error-handling blocks in the admin composables
- useCopy composable: clipboard + execCommand fallback with timed reset,
  used by MembersPanel and WebhookPanel
- utils/format.ts (fmtTime/splitList/parseMatch) removes inline duplicates
  across SendLogs, AuditLog, RouteEditor and GroupEditor
- fix: load the audit log when the audit tab becomes active (client-side
  navigation never remounted the page, leaving the list empty on first visit)
- fix: fetch the real route count for a group before confirming deletion
  instead of reusing the currently open group's route list

app/composables/useGroupRoutes.ts

@@ -1,9 +1,9 @@
 import type { Route } from "~/types";
 
 export function useGroupRoutesApi() {
+  const { needLogin } = useAuthState();
   const routes = ref<Route[]>([]);
   const loading = ref(false);
-  const needLogin = ref(false);
   const error = ref("");
 
   async function load(groupId: string): Promise<void> {
@@ -11,39 +11,22 @@ export function useGroupRoutesApi() {
     error.value = "";
     needLogin.value = false;
     try {
-      const res = await fetch(`/admin/api/groups/${encodeURIComponent(groupId)}/routes`, {
-        headers: { accept: "application/json" },
-        credentials: "same-origin",
-      });
-      if (res.status === 401) {
-        needLogin.value = true;
-        return;
-      }
-      if (!res.ok) throw new Error(`HTTP ${res.status}`);
-      const data = (await res.json()) as { routes?: Route[] };
+      const data = await apiFetch<{ routes?: Route[] }>(
+        `/admin/api/groups/${encodeURIComponent(groupId)}/routes`,
+      );
       routes.value = data.routes ?? [];
     } catch (err) {
-      error.value = err instanceof Error ? err.message : String(err);
+      if (!needLogin.value) error.value = err instanceof Error ? err.message : String(err);
     } finally {
       loading.value = false;
     }
   }
 
   async function save(groupId: string, next: Route[]): Promise<void> {
-    const res = await fetch(`/admin/api/groups/${encodeURIComponent(groupId)}/routes`, {
+    await apiFetch(`/admin/api/groups/${encodeURIComponent(groupId)}/routes`, {
       method: "PUT",
-      headers: { "content-type": "application/json" },
-      credentials: "same-origin",
       body: JSON.stringify({ routes: next }),
     });
-    if (res.status === 401) {
-      needLogin.value = true;
-      throw new Error("unauthorized");
-    }
-    if (!res.ok) {
-      const data = (await res.json().catch(() => ({}))) as { error?: string };
-      throw new Error(data.error ?? `HTTP ${res.status}`);
-    }
     routes.value = next;
   }