fix(audit): UI — L18 (decorative emoji -> Lucide icons), L19 (gated NotesList timer + create-from-url ref-in-effect)

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

src/app/(portal)/portal/login/page.tsx

@@ -30,7 +30,10 @@ function safeNextPath(raw: string | null): string {
 export default function PortalLoginPage() {
   const router = useRouter();
   const search = useSearchParams();
-  const next = safeNextPath(search.get('next'));
+  // The middleware backstop (src/proxy.ts) redirects unauthenticated
+  // portal visitors with `?redirect=`; older links / manual callers may
+  // still use `?next=`. Accept either, preferring `redirect`.
+  const next = safeNextPath(search.get('redirect') ?? search.get('next'));
 
   const [email, setEmail] = useState('');
   const [password, setPassword] = useState('');