Import march-2020-03-10 from private repo (scrubbed 2026-05-27)

Targets Rec Room 2020.03.10 client (also serves 2020.03.06).

Re-import after adding:
- DorkNet.ClientMod/dorknet-clientmod.json.template — config schema
  the launcher's manifest-driven patcher renders into UserData/.
- tools/build-patcher-zip.ps1 — produces dorknet-clientpatch-{key}.zip
  for v1-march-* Release uploads.
- .github/workflows/release.yml — on tag push publishes both
  dorknet-server-march_2020_03_10-win-x64.zip and
  dorknet-clientpatch-march_2020_03_10.zip as Release assets.

Same scrub rules as december; tools/build-patcher-zip.ps1 added to
the maintainer-side allow-list so it survives.

DorkNet.Server/Controllers/API/Cards/CardsController.cs

@@ -0,0 +1,40 @@
+using Microsoft.AspNetCore.Mvc;
+using Microsoft.EntityFrameworkCore;
+using DorkNet.Server.Auth;
+using DorkNet.Server.Data;
+
+namespace DorkNet.Server.Controllers.API.Cards;
+
+/// <summary>
+/// api.{rec.net,localhost}/api/cards/v1/all — home-screen card panel
+/// (announcements, promos, daily-bonus tiles). Returns global cards
+/// PLUS any cards targeted at the caller, sorted by Priority then
+/// CreatedAt. Expired cards filtered out server-side.
+/// </summary>
+[ApiController]
+public class CardsController(DorkNetDbContext db) : ControllerBase
+{
+    [HttpGet("api/cards/v1/all")]
+    public async Task<IActionResult> All()
+    {
+        var pid = this.CurrentPlayerId();
+        var now = DateTime.UtcNow;
+        var rows = await db.Cards
+            .Where(c => (c.PlayerId == null || c.PlayerId == pid) &&
+                        (c.ExpiresAt == null || c.ExpiresAt > now))
+            .OrderByDescending(c => c.Priority).ThenByDescending(c => c.CreatedAt)
+            .Take(50)
+            .Select(c => new
+            {
+                c.Id,
+                c.Title,
+                c.Body,
+                c.ImageName,
+                c.ActionUrl,
+                c.Category,
+                c.CreatedAt,
+            })
+            .ToListAsync();
+        return Ok(rows);
+    }
+}