* chore: disable CryptPasswordHasher

* chore: adjust "invalid password" message

* feat: first pass attended-regs API (WIP)

* refactor: prefetchable Registration.attendance_type

* feat: add ticket type methods + refactoring

 * rename `Registration.attendance_type` to `plenary_attendance_type`
 * add `plenary_ticket_type`
 * refactor to ensure consistency, reduce queries, handle bulk requests

* refactor: adjust api to match changes

* test: meeting RegistrationTests

* fix: refactor to avoid mypy limitations

* test: Registration onsite() and remote() filters

* fix: lint + add some docstrings

* refactor: adjust api token endpoint name

* perf: bulk annotation in proceedings_attendees

* test: start test coverage of new API

* test: flesh out the tests

* fix: failing test

* fix: distinct() in onsite_or_remote()

* test: fix/update tests

* refactor: limit sessions to `interim` meetings

* refactor: only fetch ietf_group if needed

* refactor: filter in db, not python

* refactor: limit meeting queries for interim views

Presumably a meeting will be no longer be pending or awaiting
announcement by a year after its date.

* chore: adjust lookback / comments

* style: ruff ruff

* perf: cap per-client concurrency on /person/ and /api/v1/

Keyed on the Cloudflare client address, with an empty key for every other
path so only these two prefixes are limited.

Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>

* perf: query the two authorship tables separately in Person.rfcs()

Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>

* perf: avoid table scans and per-alias queries in lookup_persons

Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>

* perf: assemble the profile page's data in the view

Gathers the RFC publication dates, reference counts and replaced-draft set for
every listed person in one query each, rather than a query per table cell, and
evaluates each per-person list once instead of on every template reference.

The expired Internet-Drafts heading now counts the drafts it lists; it counted
the replaced ones the list omits. Roles with the same name sort by group
acronym instead of by whatever order the query returned.

Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>

* perf: cache each rendered profile section

A repeat view of a profile, including the revalidation behind a conditional
request, now costs neither the queries nor the render. Sections are keyed on
person and date rather than position on the page, so the per-section element
ids move from a loop counter to the person's id.

Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>

* test: guard the profile page's query count and section cache

Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>

* revert: perf: cap per-client concurrency on /person/ and /api/v1/

This reverts commit fed51f0.

* refactor: make the profile section cache lifetime a setting

PERSON_PROFILE_CACHE_SECONDS, overridable from the environment in the k8s
deployment.

Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>

* fix: stop dating the profile page's empty-section messages

The dates claimed a precision the page does not have: sections are cached
independently, so the data behind two of them can differ by a cache lifetime
while both printed the same date. Without them nothing in a section depends on
when it was rendered, so the cache key no longer needs the date either.

Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>

---------

Co-authored-by: Claude Opus 5 (1M context) <noreply@anthropic.com>

…etf-tools#11241)

* Fix: Point to pending interims in meetings list (ietf-tools#11069)

* test: improve coverage

---------

Co-authored-by: Robert Sparks <rjsparks@nostrum.com>

* refactor: date-limit for has_pending_interim()

* style: clean up imports in meeting/views.py

* refactor: use common lookback time everywhere

* style: ruff ruff

* test: fix failing tests

Put test meetings in the future instead of arbitrary old date