Reconcile: your admin wins, keeping main's non-admin work

You built a self-service catalogue admin on feature/admin-and-ui-wins while I built a
competing one that had already merged and deployed. Both forked from 27821cd. Per your
call, your implementation is the one that stays.

Kept from main (files your branch didn't touch, so no conflict):
- the CI test gate (tests now run and block the image)
- motion 12.42.2
- the platform contract test

Took from your branch:
- split AdminProductController / AdminCategoryController + ProductPhotoService (server-side
  webp via cwebp)
- a real category table (Category, V3__categories.sql) behind the product filters
- pages/Admin.tsx, with server-side /admin protection that redirects a browser to Authentik
  and returns it to /admin afterward — cleaner than my client-side gate, and it avoids the
  post-login-to-home issue my version had

Deleted my competing admin (AdminController, MeController, pages/admin/*, auth.tsx, and my
admin tests).

Grafted onto your gallery: swipe + arrow keys, which the deployed version had and yours
didn't. Added an AdminSecurityTest for your endpoints (admin closed, shop public, contact
CSRF) — the admin was otherwise untested, and CI now gates on tests.

Verified against a running container: /admin redirects a browser to Authentik (a bare 401
only for */* fetches, which is correct). 25 tests green.

frontend/src/App.tsx

@@ -1,5 +1,5 @@
 import { useEffect } from 'react';
-import { Route, Routes, useLocation } from 'react-router-dom';
+import { Outlet, Route, Routes, useLocation } from 'react-router-dom';
 import Header from '@/components/Header';
 import Footer from '@/components/Footer';
 import HomePage from '@/pages/Home';
@@ -7,9 +7,7 @@ import ProductsPage from '@/pages/Products';
 import HistoryPage from '@/pages/History';
 import ContactPage from '@/pages/Contact';
 import NotFoundPage from '@/pages/NotFound';
-import AdminPage from '@/pages/admin/AdminPage';
-import ProductEditorPage from '@/pages/admin/ProductEditorPage';
-import { AuthProvider } from '@/lib/auth';
+import AdminPage from '@/pages/Admin';
 
 /**
  * Client-side navigation keeps the previous scroll position, which lands you halfway down a page you
@@ -25,26 +23,44 @@ const ScrollToTop = () => {
   return null;
 };
 
-const App = () => (
-  <AuthProvider>
+/** The shop front: the nav, the footer, and the pages a customer sees. */
+const PublicLayout = () => (
   <div className="min-h-screen bg-bakery-50 flex flex-col">
-    <ScrollToTop />
     <Header />
     <main className="flex-grow">
-      <Routes>
+      <Outlet />
+    </main>
+    <Footer />
+  </div>
+);
+
+/**
+ * The admin sits outside the public chrome deliberately. It isn't a page you'd browse to — the nav
+ * would offer a signed-in editor links away from unsaved work, and the opening hours in the footer
+ * are noise on a screen whose whole job is the catalogue.
+ */
+const AdminLayout = () => (
+  <div className="min-h-screen bg-bakery-50">
+    <Outlet />
+  </div>
+);
+
+const App = () => (
+  <>
+    <ScrollToTop />
+    <Routes>
+      <Route element={<PublicLayout />}>
         <Route path="/" element={<HomePage />} />
         <Route path="/products" element={<ProductsPage />} />
         <Route path="/history" element={<HistoryPage />} />
         <Route path="/contact" element={<ContactPage />} />
-        <Route path="/admin" element={<AdminPage />} />
-        <Route path="/admin/products/new" element={<ProductEditorPage />} />
-        <Route path="/admin/products/:id" element={<ProductEditorPage />} />
         <Route path="*" element={<NotFoundPage />} />
-      </Routes>
-    </main>
-    <Footer />
-  </div>
-  </AuthProvider>
+      </Route>
+      <Route element={<AdminLayout />}>
+        <Route path="/admin" element={<AdminPage />} />
+      </Route>
+    </Routes>
+  </>
 );
 
 export default App;