Profile: only edit fields Dex reads back

The Dex LDAP connector publishes uid, cn and mail as claims, so the
profile page now offers just Name (cn), the verified email change and
the password. The photo endpoint, SSH keys, addresses, phones and
other extended attributes are no longer read or written; existing LDAP
values are left untouched. Apache's profile upload limit drops back to
the 256 KiB used by other member routes.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

htdocs/static/membership.css

@@ -74,11 +74,6 @@ button.button { cursor: pointer; font-size: inherit; line-height: inherit; }
 .profile-field-invalid input, .profile-field-invalid textarea, .profile-field [aria-invalid="true"] { border-color: var(--red); }
 .profile-errors { margin-block: 1rem 1.5rem; padding: 1.25rem; border: 1px solid var(--red); border-radius: .8rem; background: var(--surface); }
 .profile-field .errorlist { margin-block: .5rem 0; padding-left: 1.25rem; }
-.profile-checkbox input { width: 1.2rem; height: 1.2rem; margin-right: .4rem; accent-color: var(--accent); vertical-align: middle; }
-.profile-checkbox label { font-weight: 500; }
-.profile-photo { margin: 0 0 1.5rem; }
-.profile-photo img { display: block; object-fit: contain; border: 1px solid var(--border); border-radius: 1rem; background: var(--page-deep); }
-.profile-photo figcaption { margin-top: .5rem; color: var(--muted); font-size: .85rem; }
 .profile-email-values { padding-left: 1.4rem; overflow-wrap: anywhere; }
 .profile-back { margin-top: 2rem; }
 @media (max-width: 540px) { .profile-section { padding: 1.1rem; } .profile-section .button { width: 100%; } .profile-jump-links { gap: .45rem; } .profile-jump-links a { font-size: .9rem; } }