Add regression tests for URL-encoded @ in profile handles
AdonisJS auto-decodes %40 to @, so the existing canonical-redirect
logic already 301s these. Tests lock in that behavior.
Also drop the SEO-TODO.md scratchpad now that the audit is wrapped up.
Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>