docs: activity log — frontend v2.8.72 (avatar/email/web-link fixes + search/sort)

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

09 - Audits/Activity Log.md

@@ -924,4 +924,31 @@ existing server-side point grants.
 
 ---
 
+### 2026-06-03 — frontend v2.8.72 — Mini App fixes (avatar/email/web-links) + search/sort
+
+**Bug fixes (user testing on v2.8.71):**
+- **Avatar broken in account header** — it rendered the raw relative `/uploads`
+  path against the frontend origin (404 inside the Telegram WebView). New shared
+  `resolveTelegramAvatar` (sections/telegram/avatar-url.ts) rebases avatars onto
+  the backend origin; used in both the account header and the settings uploader.
+- **Inline email verification in settings** — changing the email now surfaces a
+  code field + verify/resend buttons (resendProfileEmailVerification +
+  verifyProfileEmail) whenever the saved email is unverified, instead of forcing
+  the user back to the account-tab badge.
+- **Passkey/Wallet rows broke the Mini App** — `href` replaced the whole WebView
+  with the web dashboard and the Telegram back button couldn't return. They now
+  open in Telegram's in-app browser via `webApp.openLink`
+  (openTelegramExternalLink in telegram-webapp.ts), keeping the Mini App mounted.
+
+**Feature — search / filter / sort (queued item):**
+- Requests: search + status filter chips (all / active / completed / cancelled)
+  + sort (newest / highest budget).
+- Shop sellers: search + sort (top rated / most templates / newest).
+- Seller-shop templates: search + sort (newest / cheapest / priciest), shown
+  when the shop has > 3 templates.
+- New reusable `TelegramListControls` component + `controls` locale section.
+**Verification:** tsc + eslint clean.
+
+---
+
 <!-- Add new entries above this line. Newest at top. -->