erified:
/admin redirects to /login?redirect=/admin when logged out.
/participant redirects to /login?redirect=/participant when logged out.
admin@example.test / ChangeMeNow!2026 logs into /admin.
participant1@example.test / Participant!2026 logs into /participant.
Direct unauthenticated admin API calls now return UNAUTHORIZED.