Admin is separate and isolated.

The production admin panel now lives under /admin-ui/ with token auth. Public users stay on this frontend.

Open Admin UI

Security boundary

Public frontend, admin frontend and API routes are intentionally separated.