{# Settings-family sub-menu band under the navbar (users-design §2). Context vars:
   - subnav_on_settings: true only on /settings — links drive the in-page tab JS (data-tab +
     hash). Elsewhere they navigate to /settings#sec-…, which the tab JS opens on load.
   - subnav_active: link highlighted on standalone pages ('users' | 'advanced' | unset). #}
<div class="settings-subnav-band">
  <nav class="settings-nav" {% if subnav_on_settings %}data-initial="{{ active_tab }}"{% endif %}>
    <a href="/users" {% if subnav_active == 'users' %}class="active"{% endif %}>Users &amp; access</a>
    {% for tab, sec, label in [
      ('m365', 'sec-m365', 'Mailbox'),
      ('notify', 'sec-notify', 'Notifications'),
      ('email', 'sec-email', 'Email storage'),
      ('automation', 'sec-automation', 'Automation'),
      ('licence', 'sec-licence', 'Licence'),
      ('backup', 'sec-backup', 'Backup & restore'),
      ('advanced', 'sec-admin', 'Advanced'),
    ] %}
    {% if subnav_on_settings %}<a href="#{{ sec }}" data-tab="{{ tab }}">{{ label }}</a>
    {% else %}<a href="/settings#{{ sec }}" {% if subnav_active == tab %}class="active"{% endif %}>{{ label }}</a>{% endif %}
    {% endfor %}
  </nav>
</div>